13 days ago
Bengaluru, IndiaSenior
Responsibilities
- Design, prompt-engineer, and deploy AI-driven security review workflows using Claude and other LLM APIs.
- Lead secure design reviews and advanced threat modeling for payment systems and AI-integrated applications.
- Collaborate with engineering, product, and security teams to identify and remediate security issues.
- Perform source-code audits, product assessments, web application testing, and live testing of high-risk features.
- Own and contribute to automated security controls throughout the secure software development lifecycle.
- Build tools and wrappers that use LLMs to analyze pull requests and provide security feedback.
- Provide hands-on remediation guidance and mentor junior security and software engineers and product team members.
- Tune SAST, DAST, and SCA tooling to reduce noise and improve security signal.
Requirements
- 5+ years of application security experience.
- Proven experience with web application penetration testing and vulnerability research.
- Experience with source-code auditing, product assessments, security-tool development, and collaboration with product teams.
- Demonstrated ability to use Claude or similar LLM tools for code summarization, vulnerability detection, and automated fix generation.
- Experience integrating LLMs into security pipelines and analyzing pull requests with context-aware feedback.
- Deep practical knowledge of LLM vulnerabilities including prompt injection, insecure output handling, and model inversion.
- Experience with Python, Ruby on Rails, Java, JavaScript, and Node.js.
- Knowledge of AWS or similar cloud environments, Docker, and GitLab CI pipelines.
- Advanced experience with SAST, DAST, and SCA tools.
- Deep understanding of applied cryptography, OAuth2, SAML, and SSO implementations.
- Practical experience aligning technical controls with SOC 1, SOC 2, PCI-DSS, and emerging AI-governance frameworks.
- Ability to communicate complex security findings as actionable business risks and collaborate empathetically with developers and product teams.
Benefits
- Competitive compensation and an Employee Stock Purchase Plan.
- Global induction, talent development, and manager development programs.
- Virtual collaboration with a dynamic global team across Flywire offices and nationalities.
- Mental health, wellness, yoga, Pilates, and HIIT wellbeing programs.
- Competitive time off, FlyBetter Days for volunteering, and Digital Disconnect Days.
- Hybrid work arrangement.
