Security Engineer II (Defensive Operations)

Description

The company provides global payments enablement and software. It was founded more than ten years ago to handle high-stakes, high-value payments and has since expanded into new regions and industry verticals.

The company supports more than 5,100 clients across the education, healthcare, travel and B2B industries. Payment methods span 240 countries and territories and more than 140 currencies.

The team has over 1,400 employees from more than 40 nationalities, working across 15 offices worldwide.

This is a Security Engineer II role on the global Security Engineering team. You will be the technical authority for secure software design, cloud-native infrastructure defense, penetration testing and real-time incident detection across the company's global footprint.

The work is automation-first and sits inside a fast-moving fintech environment. You will work with software engineering and SRE squads, and you will also respond to threats, run red team testing and contain live incidents.

The interview process includes meetings with the hiring manager, team peers and the VP of the department, plus a skills assessment. A Talent Acquisition Partner will guide you through each step and answer your questions.

Responsibilities

• Design and build automated security checks and validation tools into engineering pipelines, along with custom internal tooling and controls, so that security does not slow delivery.
• Work with SRE and DevOps to set secure cloud architecture blueprints, manage security scanning of Terraform Infrastructure-as-Code, and enforce Zero Trust boundaries across Docker and Kubernetes environments.
• Build automated security review workflows using LLM APIs such as Claude. Put controls in place against prompt injection, insecure output handling, model inversion and data poisoning in generative AI features.
• Think like an attacker to find logic flaws and research exploits. Emulate zero-day adversary behavior against financial platforms through manual source code audits, API exploitation and cloud penetration testing.
• During active incidents, lead technical containment, forensic evidence collection and fast threat removal. Create high-fidelity detection rules and automated alert workflows in the SIEM.
• Join software and infrastructure sprint planning from the start so security is part of the design. Give practical code fixes and mentor junior engineers.

Requirements

• Basic qualifications: a Bachelor's degree in Computer Science, Cyber Security, Software Engineering or a related technical field, or equivalent experience.
• At least 3 years of progressive engineering experience across Application Security, Cloud Architecture Defense and active security operations, including SecOps, incident response and penetration testing.
• A proven record of carrying out deep manual penetration testing, web application exploitation and incident containment on your own, without depending mainly on commercial automated scanners.
• Strong hands-on knowledge of AWS or public cloud setups, containers (Docker, Kubernetes), network security and building or maintaining GitLab CI pipelines.
• Working proficiency in at least one of Python, Ruby on Rails, Java or Node.js, plus a solid grasp of modern web frameworks.
• A solid understanding of the OWASP Top 10 for LLMs, applied cryptography, cloud network isolation and federated authentication (OAuth2, SAML, OIDC, Zero Trust IAM).
• Working proficiency with modern EDR platforms, SIEM systems, packet capture analysis (PCAP), MITRE ATT&CK and forensic collection tools.
• Practical experience applying technical software and infrastructure controls to standards such as PCI-DSS (v4.0), SOC 1, SOC 2 or DORA.
• Preferred: offensive or red team certifications such as OSCP, OSCE or SANS GXPN.
• Preferred: cloud and architecture certifications such as AWS Certified Security - Specialty, CKS (Certified Kubernetes Security Specialist) or CISSP.
• Preferred: incident response certifications such as GCIH, GCFA or a specialized Blue Team certification.
• Preferred: AI security certification OffSec OSAI.

Conditions

The base salary for this role is listed as $0-$0.

The listed range is the minimum and maximum target for new hire salaries across all US locations. Individual pay depends on work location, job-related skills, experience, education and training.

Benefits

• Competitive compensation and competitive time off.
• Employee Stock Purchase Plan (ESPP).
• Opportunity to work with talented people across the globe.
• Wellbeing programs covering mental health and wellness, including yoga, pilates and HIIT classes.
• Development programs, including Managers Taking Flight for new or aspiring managers and OneFlywire Career Mobility.