6 hours ago
Boston, MA, USAMid Level
Base Salary
$99k - $120k/yr
Responsibilities
- Integrate automated security requirements, validation tools, internal tooling, and controls into software engineering pipelines.
- Design secure cloud architecture blueprints, perform Terraform security scans, and enforce Zero Trust boundaries in Docker and Kubernetes environments.
- Design and deploy LLM API security review workflows and controls for generative AI features.
- Conduct manual source-code audits, API exploitation, cloud penetration testing, exploit research, and red-team exercises.
- Lead technical containment, forensic collection, threat eradication, detection-rule development, and automated SIEM alert workflows during incidents.
- Partner with software engineering, SRE, and DevOps teams from sprint planning through implementation and mentor junior engineers.
Requirements
- Bachelor’s degree in Computer Science, Cyber Security, Software Engineering, or a related technical discipline, or equivalent experience.
- At least 3 years of progressive engineering experience across application security, cloud architecture defense, and active security operations.
- Demonstrated ability to perform manual penetration testing, web application exploitation, and incident containment without relying solely on commercial scanners.
- Practical knowledge of AWS or public cloud topologies, Docker, Kubernetes, network security, and GitLab CI pipelines.
- Foundational proficiency with Python, Ruby on Rails, Java, or Node.js and modern web development frameworks.
- Understanding of the OWASP Top 10 for LLMs, applied cryptography, cloud network isolation, OAuth2, SAML, OIDC, and Zero Trust IAM.
- Working proficiency with EDR platforms, SIEM systems, PCAP analysis, MITRE ATT&CK, and forensic collection tools.
- Experience aligning technical controls with PCI-DSS v4.0, SOC 1, SOC 2, or DORA.
- Preferred certifications include OSCP, OSCE, SANS GXPN, AWS Certified Security - Specialty, CKS, CISSP, GCIH, GCFA, Blue Team certifications, and OffSec OSAI.
Benefits
- Full-time US position with a hybrid work arrangement, indicated by #LI-Hybrid.
- Benefits are provided; specific benefit details are not stated.
About Flywire
Flywire is a public payments enablement and software company that helps education, healthcare, travel, and B2B organizations accept and reconcile complex cross-border payments. It sells vertical-specific A/R software integrated with a proprietary global payments network, monetized through SaaS and transaction fees. Founded in 2009 and headquartered in Boston, it supports 5,300+ clients, 140+ currencies, and payment flows across 240 countries and territories, with ERP integrations such as NetSuite.