14 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Own the end-to-end integration of automated security requirements and validation tooling into engineering pipelines.
- Build internal security tooling, wrappers, and automated controls to replace manual security checkpoints.
- Partner with SRE and DevOps teams on secure public cloud architecture, Infrastructure as Code scanning, network isolation, IAM, and Zero Trust controls.
- Design, prompt engineer, and deploy LLM API-based security review workflows for real-time code analysis and pull-request feedback.
- Establish controls to protect generative AI features from prompt injection, insecure output handling, model inversion, and data poisoning.
- Perform deep manual source-code, configuration, and API security reviews beyond commercial automated scanning.
- Embed security practices into software and infrastructure planning and provide actionable technical guidance.
- Mentor junior security, software, and SRE engineers.
Requirements
- Bachelor's degree in Computer Science, Cyber Security, Software Engineering, or a related technical discipline is required.
- 5 to 8 years of progressive engineering experience across Application Security and Cloud Architecture Defence.
- Proven experience independently conducting deep manual code and configuration reviews.
- Deep practical knowledge of AWS or similar public cloud topologies, Docker, Kubernetes, network security controls, and GitLab CI pipelines.
- Proficiency with Python, Ruby on Rails, Java, and Node.js.
- Expert understanding of the OWASP Top 10 for LLMs, prompt engineering wrappers, applied cryptography, cloud network isolation, OAuth2, SAML, OIDC, Zero Trust, and IAM.
- Experience aligning software and infrastructure controls with PCI-DSS v4.0, SOC 1, SOC 2, and DORA.
- Preferred certifications include AWS Certified Security - Specialty, Certified Kubernetes Security Specialist, CISSP, OffSec OSAI, OSCP, or GCIH.
- Ability to communicate technical risks clearly, solve complex application and cloud infrastructure problems, and guide risk-based decisions during incidents or high-pressure launches.
Benefits
- Competitive compensation and an Employee Stock Purchase Plan.
- Competitive time off, including Digital Disconnect and FlyBetter Days for volunteering.
- Global induction, wellbeing, and talent development programs.
- Global collaboration with teams across Flywire's international organization.
- Hybrid work arrangement, indicated by #LI-Hybrid.
- Interview process includes meetings with the hiring manager, peers, department VP, and a skills assessment.
About Flywire
Flywire is a public payments enablement and software company that helps education, healthcare, travel, and B2B organizations accept and reconcile complex cross-border payments. It sells vertical-specific A/R software integrated with a proprietary global payments network, monetized through SaaS and transaction fees. Founded in 2009 and headquartered in Boston, it supports 5,300+ clients, 140+ currencies, and payment flows across 240 countries and territories, with ERP integrations such as NetSuite.