Security Engineer II – Offensive Track

Are you ready to trade your job for a journey? Become a FlyMate! Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world. What more do we need to truly be unstoppable? Perhaps, that is you! Who we are: Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments in higher education. We’ve since scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world. Today we support more than 5,300 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies. With over 1,400 global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow. Role Focus At this level, your focus sits within Offensive Penetration Testing and Security Operations, supporting the wider Active Operational Defender track under the guidance of senior engineers. You will assist with manual testing engagements, help tune SIEM detection rules, and support the team during live security incidents, building the operational depth needed to work independently over time. Job Summary As a Security Engineer II on the Active Operational Defender track, you will build hands-on experience across penetration testing, threat detection, and incident response working under the direction of senior and lead engineers. You will support live operational work within a high-velocity fintech environment, developing the manual testing and detection engineering skills needed to take on more independent responsibility over time. Key Responsibilities & Tasks (by Priority) Offensive Penetration Testing & Red Teaming Support penetration testing engagements across financial platforms and product architectures under senior guidance, building practical exploit research experience. Assist with manual security reviews including source code audits, API testing, and cloud configuration checks, working towards independent delivery of smaller engagements. Contribute to adversarial testing of AI features where in scope, learning to identify prompt injection and related LLM-specific weaknesses. Threat Detection Engineering & SIEM Help design and tune detection rules and alert workflows within the enterprise SIEM, leveraging senior guidance and established detection frameworks. Support SecOps in reviewing detection coverage against current threats using frameworks such as MITRE ATT&CK. Incident Response & Forensics Act as a first-line responder during active security incidents, carrying out evidence collection and initial triage under senior direction. Support post-incident analysis by pulling together logs, timelines, and technical findings for senior review. Cross-Functional Collaboration & Development Participate in security operations and engineering planning to build a practical understanding of detection and response capabilities. Communicate testing findings and incident metrics clearly to immediate team members and stakeholders. Actively seek mentorship from senior and lead security engineers across offensive tooling, detection engineering, and incident response practices. Minimum Requirements (Education & Experience) Education: Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, a related technical discipline, or equivalent practical experience. Core Experience: 1 to 3 years of hands-on experience in penetration testing, security operations, or a closely related technical role. Technical Skills & Knowledge Foundational Offensive Skills: Hands-on exposure to manual web application testing, CTF-style exploitation, or vulnerability research (via work experience, personal projects, or study). SecOps & Forensics: Working knowledge of SIEM concepts, EDR tooling, or network packet analysis, alongside familiarity with frameworks such as MITRE ATT&CK. Scripting / Automation: Proficiency in reading and writing scripts (e.g., Python) to support security testing and automation workflows. AI Security Awareness: Basic working interest in the OWASP Top 10 for LLMs and understanding of how adversarial AI testing differs from traditional app security. Regulatory Context: General understanding of compliance frameworks such as PCI-DSS, SOC 2, or DORA, with a willingness to expand practical knowledge on the job. Preferred Certifications (Optional / Strongly Encouraged) Offensive & Red Team: OSCP, OSCE, or SANS GXPN. Incident Response & Defense: GCIH, GCFA, or specialized Blue Team certifications. AI Security: OffSec OSAI (Offensive Security AI Red Teamer). Soft Skills & Mindset Dual Focus: Combines an attacker’s drive to uncover vulnerabilities with a defender's discipline to build actionable SIEM detection rules. Composure Under Pressure: Ability to stay calm and analytical during live security breaches or tight production release windows. High-Impact Communication: Capable of translating technical exploit chains and log anomalies into plain language for executive and non-technical stakeholders. Business-Minded Security: Balances risk mitigation with business goals, helping position security as a driver for enterprise growth. Submit today and get started! We are excited to get to know you! Throughout our process you can expect to meet different FlyMates including the Hiring Manager and other Flymates. Your Talent Acquisition Partner will walk you through the steps and be your “go-to” person for questions. Flywire is an equal opportunity employer and follows a policy of administering all employment decisions and personnel actions without regard to race, color, religion, sex, pregnancy, gender identity, national origin, age, ancestry, physical or mental disability, sexual orientation, genetic disposition or carrier status, veteran status, or any other category protected under applicable national, federal, state or local law. The US base salary range for this full-time position is $99,000 - 120,000 and benefits. Our salary ranges are determined by role, position level, and location. The range displayed on this job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and several other factors, including job-related skills, experience, relevant education and training. #LI-Hybrid