# Security Engineer II (Defensive Operations) at FlyWire

- Company: FlyWire
- What the company does: Are you ready to trade your job for a journey? Become a FlyMate! Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. Backed by Techstars.
- Company website: https://flywirecameras.com
- Type: Startups (AI role)
- Level: Mid level
- Location: Boston, MA
- Work setup: On-site
- Pay: $99K to $120K base salary per year (USD)
- Posted: 2026-09-23
- Apply by: 2026-11-07
- Apply: https://jobs.smartrecruiters.com/Flywire1/744000151362725
- Page: https://www.1752.vc/careers/jobs/flywire-security-engineer-ii-defensive-operations/

## About the role

Secure SDLC & CI/CD Automation: Own, design, and drive the end-to-end integration of automated technical security requirements and validation tools into high-velocity engineering pipelines. Build custom internal tooling, wrappers, and automated controls to maximize development velocity without friction.

## What they're looking for

- Education: Bachelor’s degree in Computer Science, Cyber Security, Software Engineering, or a related technical discipline (or equivalent experience)
- Experience: 3+ years of progressive engineering experience moving fluidly between Application Security, Cloud Architecture Defense, and Active Security Operations (SecOps/Incident Response/Penetration Testing)
- Advanced Exploitation & Defense: Proven track record of independently performing deep manual penetration testing, web application exploitation, and incident containment without relying solely on commercial automated scanners
- Cloud & DevOps Stack: Strong practical knowledge of AWS or public cloud topologies, containerization (Docker, Kubernetes), network security, and building/maintaining GitLab CI pipelines
- Programming Languages: Foundational proficiency with modern web development frameworks and programming languages including Python, Ruby on Rails, Java, or Node.js
- AI & Security Domains: Solid understanding of the OWASP Top 10 for LLMs framework, applied cryptography, cloud network isolation, and federated authentication architectures (OAuth2, SAML, OIDC, Zero Trust IAM)

Tags: Security