Security Engineer, Insider Risk

Airwallex; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Airwallex seeks a Security Engineer focused on insider and fraud threats within the Information Security Engineering team. You will protect Airwallex’s $200b+ payments ecosystem by identifying, investigating, and challenging threats from internal and external actors.

You will design detection rules, tune SIEM/EDR/DLP, and collaborate with fraud, KYC, and engineering teams to strengthen proactive security across our global platform.

Qualifications

• Bachelor’s degree or equivalent in Computer Science, Information Security, or related field.
• 3+ years hands-on experience in security engineering or detection engineering with insider threat or fraud focus.
• Experience building, tuning, and operating detection and monitoring solutions (SIEM/EDR/DLP/UBA).
• Knowledge of cloud-native architectures and impact on identity, access, monitoring.
• Experience coordinating incident response and digital forensics.

Responsibilities

• Lead creation and tuning of detection signatures and analytics across SIEM/EDR/DLP and payment monitoring platforms.
• Support incident response and digital forensics efforts.
• Identify and mitigate insider abuse, privilege escalation, and social engineering risks.
• Collaborate with fraud analysts, KYC, compliance, and security to improve high-risk workflows.
• Create, maintain, and operationalize detection logic for insider and fraud scenarios.
• Share best practices in threat modeling and detection with engineering teams.

Skills

Insider threat

Fraud detection

Threat modeling

Detection rules

Incident response

Digital forensics

Cloud-native

Communication

Collaboration

Education

Bachelor’s degree in Computer Science, Information Security, or relevant field

Tools

SIEM

EDR

DLP

User behavior analytics

Fraud detection platforms

Job description

About Airwallex

Airwallex is the only unified payments and financial platform for global businesses. Powered by our unique combination of proprietary infrastructure and software, we empower over 250,000 businesses worldwide – including Brex, Rippling, Navan, Qantas, SHEIN and many more – with fully integrated solutions to manage everything from business accounts, payments, spend management and treasury, to embedded finance at a global scale.

Proudly founded in Melbourne, we have a team of over 2,300 of the brightest and most innovative people in tech across 27 offices around the globe. Valued at US$11 billion and backed by world-leading investors including T. Rowe Price, Visa, Mastercard, Robinhood Ventures, Sequoia, Salesforce Ventures, DST Global, and Lone Pine Capital, Airwallex is leading the charge in building the global payments and financial platform of the future. If you’re ready to do the most ambitious work of your career, join us.

Attributes We Value

We hire successful builders with founder-like energy who want real impact, accelerated learning, and true ownership. You bring strong role-related expertise and sharp thinking, and you’re motivated by our mission and operating principles. You move fast with good judgment, dig deep with curiosity, and make decisions from first principles, balancing speed and rigor.

You're humble and collaborative; turn zero‑to‑one ideas into real products, and you “get stuff done” end‑to‑end. You use AI to work smarter and solve problems faster. Here, you’ll tackle complex, high‑visibility problems with exceptional teammates and grow your career as we build the future of global banking. If that sounds like you, let’s build what’s next.

About the team

The Airwallex Information Security Team is a high calibre and highly proactive team that works across our infrastructure, applications, corporate IT and broader engineering functions.

What you’ll do

As a Security Engineer focused on insider and fraud threats within the Information Security Engineering team, you will be pivotal in protecting Airwallex’s $200b+ payments ecosystem, our customers, and our global workforce. Your mandate centers on identifying, investigating, and challenging threats from both internal and external actors. You will be challenged to:

• Design, develop, and maintain advanced detection rules and automated response mechanisms to surface insider and fraud risk, using a mix of behavioral analytics, anomaly detection, and rule‑based logic.
• Deep‑dive into user, system, and financial data to uncover complex fraud tactics and potential abuse by insiders or privileged users.
• Contribute insight into evolving fraud trends and trusted insider behaviors, strengthening Airwallex’s proactive security stance through continuous learning and agile solutioning.
• Mentor peers on advanced detection strategies, fraud taxonomy development, and the broader fraud/insider threat lifecycle, fostering technical depth on the team.

Responsibilities

• Lead the creation and tuning of high‑efficacy detection signatures and analytics across SIEM, EDR, DLP, and payment monitoring platforms, focusing on both technical threats and nuanced abuse scenarios.
• Support relevant incident response and digital forensics efforts.
• Identify and mitigate the risk of issues such as account misuse, privilege escalation, and social engineering within the organization.
• Collaborate with fraud analysts, KYC operations, compliance, and the broader security team to improve high‑risk workflows (onboarding, KYC, authentication, funds movement).
• Create, maintain, and operationalize detection logic for insider and fraud scenarios.
• Share domain best practices in threat modeling and detection with the engineering team, actively supporting others’ development in fraud and insider risk domains.

Who you are

You have a proven passion for detecting and responding to sophisticated fraud and insider threats in a Fintech or technology-driven environment. You are outcome-driven, relentless in your pursuit of root causes, and thrive when blending technical acumen with creative threat modeling. You are:

• Intellectually curious, especially about insider threat frameworks, fraud prevention, psychology of trust abuse, and organizational risk.
• Adept at navigating ambiguity, seeking out new data sources, and synthesizing signals across disparate platforms and logs.
• Proactive in identifying abuse patterns, hypothesizing how attackers (internal and external) might operate within a complex ecosystem, and testing theories through technical proof.
• Articulate when presenting complex scenarios to stakeholders, and skilled at collaborating across business, security, compliance, and engineering functions.

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Security, or relevant field.
• 3+ years of hands‑on experience in security engineering or detection engineering, with a strong focus on insider threat or fraud risk (ideally in financial or high‑growth technology settings).
• Direct experience building, tuning, and operating detection and monitoring solutions (e.g. SIEM, EDR, DLP, user behavior analytics, and fraud detection platforms).
• Expertise designing and implementing DLP controls and correlating exfiltration techniques with insider scenarios.
• Working knowledge of modern cloud‑native architectures and how they impact identity, access, and monitoring.
• Experience with coordinating incident response and digital forensics.

Preferred Qualifications

• Experience within Fintech, payment, or regulated environments handling substantial fraud or insider risk volumes.
• Strong background in digital forensics, transaction analysis, and linking forensic evidence to potential business impact.

Understanding of regulatory requirements, compliance best practices, and incident disclosure obligations for financial institutions.

Applicant Safety Policy: Fraud and Third-Party Recruiters

To protect you from recruitment scams, please be aware that Airwallex will not ask for bank details, sensitive ID numbers (i.e. passport), or any form of payment during the application or interview process. All official communication will come from an @airwallex.com email address. Please apply only through careers.airwallex.com or our official LinkedIn page.

Airwallex does not accept unsolicited resumes from search firms/recruiters. Airwallex will not pay any fees to search firms/recruiters if a candidate is submitted by a search firm/recruiter unless an agreement has been entered into with respect to specific open position(s). Search firms/recruiters submitting resumes to Airwallex on an unsolicited basis shall be deemed to accept this condition, regardless of any other provision to the contrary.

Equal opportunity

Airwallex is proud to be an equal opportunity employer. We value diversity and anyone seeking employment at Airwallex is considered based on merit, qualifications, competence and talent. We don’t regard color, religion, race, national origin, sexual orientation, ancestry, citizenship, sex, marital or family status, disability, gender, or any other legally protected status when making our hiring decisions. If you have a disability or special need that requires accommodation, please let us know.