Senior Security Engineer (Offensive)

Are you ready to trade your job for a journey? Become a FlyMate! Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world. What more do we need to truly be unstoppable? Perhaps, that is you! Who we are: Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments. We’ve scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world. Today we support more than 5,100 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies. With over 1,400+ global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow. Job Summary: As a Security Engineer II on the Active Operational Defender track you will build hands on experience across penetration testing, threat detection and incident response, working under the direction of senior and lead engineers. You will support live operational work within a high velocity fintech environment, developing the manual testing and detection engineering skills needed to take on more independent responsibility over time. Responsibilities and Tasks: 1. Offensive Penetration Testing & Red Teaming Support penetration testing engagements across financial platforms and product architectures under senior guidance, building practical exploit research experience. Assist with manual security reviews including source code audits, API testing and cloud configuration checks, working towards independent delivery of smaller engagements. Contribute to adversarial testing of AI features where in scope, learning to identify prompt injection and related LLM specific weaknesses. 2. Threat Detection Engineering & SIEM Help design and tune detection rules and alert workflows within the enterprise SIEM, working from senior engineers' guidance and established detection frameworks. Support SecOps in reviewing detection coverage against current threats, referencing frameworks such as MITRE ATT&CK. 3. Incident Response & Forensics Act as a first line responder during active security incidents, carrying out evidence collection and initial triage under senior direction. Support post incident analysis by pulling together logs, timelines and technical findings for senior review. 4. Cross Functional Collaboration & Development