11 hours ago
Bengaluru, IndiaSenior / Staff+
Responsibilities
- Own the end-to-end integration of automated security requirements and validation tooling into engineering pipelines.
- Build internal security tooling, wrappers, and automated controls to replace manual security checkpoints.
- Partner with SRE and DevOps teams on secure public-cloud architecture, Infrastructure as Code security scanning, network isolation, IAM, and Zero Trust controls.
- Design, prompt engineer, and deploy LLM API-based security review workflows for real-time code analysis and pull-request feedback.
- Protect generative AI features against prompt injection, insecure output handling, model inversion, and data poisoning.
- Conduct deep manual source-code audits and API security reviews to identify complex logic flaws.
- Embed security guidance into software and infrastructure planning and mentor junior security, software, and SRE engineers.
Requirements
- Bachelor’s degree in Computer Science, Cyber Security, Software Engineering, or a related technical discipline is required; a Master’s degree is preferred.
- 5–8 years of progressive engineering experience across application security and cloud architecture defense.
- Proven experience independently performing deep manual code and configuration reviews beyond commercial automated scanning.
- Practical expertise with AWS or similar public clouds, Docker, Kubernetes, network security controls, and GitLab CI pipelines.
- Proficiency with Python, Ruby on Rails, Java, and Node.js.
- Expertise in OWASP Top 10 for LLMs, prompt-engineering wrappers, applied cryptography, cloud network isolation, OAuth2, SAML, OIDC, and Zero Trust IAM.
- Experience aligning software and infrastructure controls with PCI-DSS v4.0, SOC 1, SOC 2, and DORA.
- Preferred certifications include AWS Certified Security – Specialty, Certified Kubernetes Security Specialist, CISSP, OffSec OSAI, OSCP, and GCIH.
- Ability to communicate technical risk clearly, make risk-based decisions under pressure, and collaborate effectively with software, SRE, infrastructure, and product teams.
Benefits
- Competitive compensation and an Employee Stock Purchase Plan.
- Competitive time off, including Digital Disconnect and FlyBetter Days for volunteering.
- Global induction, wellbeing, fitness, and talent-development programs.
- Global collaboration with colleagues across Flywire’s offices and teams.
- Hybrid work arrangement, indicated by the #LI-Hybrid designation.
About Flywire
Flywire is a public payments enablement and software company that helps education, healthcare, travel, and B2B organizations accept and reconcile complex cross-border payments. It sells vertical-specific A/R software integrated with a proprietary global payments network, monetized through SaaS and transaction fees. Founded in 2009 and headquartered in Boston, it supports 5,300+ clients, 140+ currencies, and payment flows across 240 countries and territories, with ERP integrations such as NetSuite.