Security Engineer II (Defensive)

Are you ready to trade your job for a journey? Become a FlyMate! Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world. What more do we need to truly be unstoppable? Perhaps, that is you! Who we are: Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments. We’ve scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world. Today we support more than 5,100 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies. With over 1,400+ global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow. Job Summary:  As a Security Engineer II on the Defensive Platform Builder track you will build hands on experience across secure software design and cloud native infrastructure defence, working under the direction of senior and lead engineers. You will develop an automation first mindset within a high velocity fintech environment, supporting the integration of security controls into our public cloud and GitLab CI/CD pipelines while building towards independent ownership of AppSec and CloudSec work. Responsibilities and Tasks (in order of priority) 1. Secure SDLC & CI/CD Automation Support the integration of automated security requirements and validation tooling into engineering pipelines under the direction of senior team members. Help build and maintain internal tooling and automated controls that reduce reliance on manual security checkpoints. 2. Cloud & Infrastructure Hardening Work alongside SRE and DevOps teams on secure public cloud architecture, running Infrastructure as Code security scans (for example Terraform) and supporting network isolation controls. Contribute to cloud Identity and Access Management reviews and help maintain Zero Trust boundaries within containerised environments such as Docker and Kubernetes. 3. AI Driven Security & Application Reviews Assist in configuring and running automated security review workflows that use LLM APIs for pull request analysis. Learn and apply technical controls that protect generative AI features against LLM specific risks such as prompt injection and insecure output handling. Support source code audits and API security reviews, building towards independent ownership of more complex assessments over time. 4. Cross Functional Collaboration & Development