Security Engineer, Flywire
Application Security
$109.2-114.2k
Global payments processing
Be an early applicant
Global payments processing
1001+ employees
Be an early applicant
$109.2-114.2k
1001+ employees
Company mission
To improve the payment experience for everyone.
Role
Who you are
- Master’s degree or foreign equivalent in Computer Science with a specialization in Information Security, or a related field, and one (1) of experience in computer science, information security, application security or a closely related role
- Experience and/or education must include:
- Vulnerability & Risk Management: Perform comprehensive vulnerability management and risk assessments using industry tools such as Tenable and Qualys. Deliver actionable reports with remediation guidance and continuously monitor and triage alerts with SIEM platforms including Splunk, Sumo Logic, ELK, and Wazuh
- Application Security Testing: Conduct hands-on application security testing using a variety of SAST, SCA, and DAST tools, including Veracode, BurpSuite, Snyk, Semgrep, OWASP ZAP, Arachni, SonarQube, and OWASP Dependency-Check
- Secure Software Development: Develop and review secure applications in programming languages such as Ruby on Rails, Java, Python, and Go, focusing on modern UI web interfaces (e.g., JavaScript, ReactJS, AngularJS, Node.js). Ensure adherence to secure coding standards (OWASP Top 10) and protect against threats like XSS and SQL injection
- Threat Modeling & Security Architecture: Conduct peer code reviews, perform in-depth threat modeling using methodologies like STRIDE, and execute security architecture assessments to proactively identify and mitigate risks throughout the software development lifecycle
- DevSecOps & CI/CD Integration: Embed security into CI/CD pipelines, specifically within GitLab, by writing custom jobs and rules. Integrate and automate security tools like Trivy and Semgrep to ensure continuous security checks and early vulnerability detection within a DevSecOps framework
- Data Security & Cryptography: Securely handle sensitive data using credential management tools like HashiCorp Vault. Design and implement strong cryptographic techniques, including AES, RSA, ECC, and various hashing algorithms
- Cloud Security & Compliance: Review and enforce cloud security best practices for AWS and GCP environments. Conduct internal and external security audits aligned with compliance frameworks such as SOC II Type 2, ISO 27002, NIST, and PCI, and prepare associated reports and policy updates
- Authentication & Authorization: Design and implement robust authentication and authorization systems utilizing protocols such as OAuth 2.0, SAML, JWT, and access control models like RBAC/ABAC
- Security Automation: Develop custom security software using Python, Bash, and Ruby to automate security processes, from vulnerability scanning to incident response
- Client & Third-Party Support: Support client and third-party security audits by preparing responses to security assessments and risk questionnaires, including those from platforms like OneTrust
What the job involves
- Responsible for ensuring the security of applications and software systems developed and used within the organization
- This role involves conducting application security reviews, performing secure code analysis, integrating security testing into CI/CD pipelines, and guiding developers on secure coding practices
- Design and implement security protocols for Healthcare, EDU, and B2B applications, conducting regular threat modeling and vulnerability assessments to identify and mitigate risks, and developing and deploying cryptographic solutions to protect sensitive data
- Analyze and interpret student-related data from Indian and Chinese markets to inform strategies for mitigating payer fraud and enhancing security for international student transactions
- Telecommuting permissible from any location within US
Our take
Flywire is a digital platform that simplifies the paying experience for international transactions. Flywire leverages its vertical-specific software and payments technology to deeply embed within client's existing accounts-receivable workflows.
Flywire was first set up to help international students pay their tuition for American colleges, but has since grown into a global payments enablement and software company. It has processed billions of dollars in payments for clients across the world and secured approval for its major payment institution license, enabling it to operate domestic money transfer and cross-border money transfer services.
Flywire serves clients across education, healthcare, travel, and B2B, including several Ivy League schools, and top US hospital systems. The company appears to be focussed on growth, including by strategic acquisitions and entry into new markets, recently in the Asia Pacific and Australia, as well as further developing its channel partners ecosystem.
Steph
Company Specialist at Welcome to the Jungle
Insights
12% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Mar 2021
$60m
SERIES F
Feb 2020
$120m
SERIES E
Total funding: $323.2m
Company HQ
Downtown Crossing, Boston, MA
Leadership
Mike Massaro
(CEO)Mike joined Flywire as a VP of Business Development in 2012 before becoming CEO in 2013. Prior to this, he spent 6 years at Carrier IQ as a VP of Strategic Accounts & Corporate Development and Advisor.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 20 more jobs at Flywire