22 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Design, prompt-engineer, and deploy AI-driven security review workflows using Claude and other LLM APIs.
- Lead secure design reviews and advanced threat modeling for payment systems and AI-integrated applications.
- Perform source code audits, product security assessments, web application penetration tests, vulnerability research, and live application testing.
- Build and maintain automated security controls and integrate security analysis into the secure software development lifecycle.
- Develop custom tools and LLM wrappers that analyze pull requests and provide context-aware security feedback.
- Tune SAST, DAST, and SCA tools to reduce noise and improve actionable findings.
- Provide remediation guidance and mentor security engineers, software engineers, and product team members.
- Translate AI-generated security findings into actionable business risks for stakeholders.
- Align technical controls with SOC 1, SOC 2, PCI-DSS, and emerging AI-governance frameworks.
Requirements
- 5+ years of application security experience.
- Proven experience with web application penetration testing and vulnerability research.
- Experience with source code auditing, product assessments, product-team interaction, and security tool development.
- Demonstrated ability to use Claude or similar LLM tools for code summarization, vulnerability detection, and automated fix generation.
- Experience building custom tools or wrappers that use LLMs to analyze pull requests and provide security feedback.
- Deep practical knowledge of prompt injection, insecure output handling, model inversion, and other OWASP Top 10 for LLMs risks.
- Experience with Python, Ruby on Rails, Java, JavaScript, and Node.js.
- Knowledge of AWS or similar cloud environments, Docker, and GitLab CI pipelines.
- Advanced experience with SAST, DAST, and SCA tools.
- Deep understanding of applied cryptography, OAuth2, SAML, and SSO implementations.
- Practical experience aligning technical controls with SOC 1, SOC 2, PCI-DSS, and emerging AI-governance frameworks.
- Ability to collaborate effectively with engineering, security, and product teams and communicate complex findings clearly.
Benefits
- Competitive compensation and an Employee Stock Purchase Plan.
- Global induction, talent development, wellbeing, and wellness programs.
- Virtual collaboration with a dynamic global team and colleagues across more than 40 nationalities.
- Competitive time off, including volunteer days and Digital Disconnect Days.
- Hybrid work arrangement, indicated by the #Li-Hybrid tag.
- Equal opportunity employment with a focus on diversity, gender equality, and inclusion.
About Flywire
Flywire is a public payments enablement and software company that helps education, healthcare, travel, and B2B organizations accept and reconcile complex cross-border payments. It sells vertical-specific A/R software integrated with a proprietary global payments network, monetized through SaaS and transaction fees. Founded in 2009 and headquartered in Boston, it supports 5,300+ clients, 140+ currencies, and payment flows across 240 countries and territories, with ERP integrations such as NetSuite.