Application Security Engineer

Are you ready to trade your job for a journey? Become a FlyMate!

Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world.

What more do we need to truly be unstoppable? Perhaps, that is you!

Who we are:

Flywire is a global payments enablement and software company, founded a decade ago to solve high-stakes, high-value payments in education, using modern technology.

Today, we’ve digitized payments for more than 3,300+ global clients across education, healthcare, travel & B2B, covering more than 240 countries and territories and supporting over 140 currencies. And, we’re just getting started!

With over 1000+ global FlyMates, representing more than 40 nationalities, and in 14 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow.

🚀 The Opportunity:

We are looking to hire an eager and skilful Application Security Engineer. This individual will support our Security Team in providing security support for our development houses and ensure the privacy and security of confidential business and personal information.

Key Responsibilities:

• Security Design & Architecture: Draft security requirements for systems, services, or integrations. Conduct secure design, threat modeling, and secure architecture initiatives.

• Engineering Collaboration: Collaborate frequently with different engineering teams to identify and address security issues. Attend engineering syncs to ensure that product features have security "built-in."

• Full-Stack Reviews: Perform technical tasks on change and integration reviews, including full security reviews from source code auditing to live application testing.

• Automation & SDLC: Contribute to the automated security controls we are building and take an active part in every aspect of the secure software development lifecycle (S-SDLC).

• Technical Guidance: Provide hands-on remediation guidance to development teams and perform technical lead tasks with other team members.

🧠 Here’s What We’re Looking For:

• Experience: 4+ years in AppSec. Proven experience performing web application penetration tests and vulnerability research. Skills in source code auditing, product assessments, and development of security tools are essential.

• Security Mindset: A "breaker" mentality, with the ability to think like an attacker to identify flaws, but effectively crafting the mitigating controls to fix them.

• Technical Proficiencies: 

• Proficiency in Ruby on Rails, Java, and modern web dev (JavaScript, Python, Node.js, etc.).

• Deep understanding of OWASP Top 10 (XSS, CSRF, SQLi, Cookie Manipulation, etc.).

• Practical knowledge of the OWASP Top 10 for LLM Applications (Prompt Injection, Insecure Output Handling, etc.).

• Working experience in authentication: OAuth, SAML, and SSO.

• General knowledge of applied cryptography.

• Familiarity with cloud technologies and containerization.

• Experience with SAST/DAST/SCA tools and integrating them into DevSecOps pipelines.

• Ability to implement security guardrails for AI-driven features and validate model integrity (nice to have).

• Compliance & Audits: Knowledge of security audit certifications like PCI-DSS, SOC 1, and SOC 2.

• Soft Skills: Ability to explain complex technical findings (from pentests or reviews) to both technical and non-technical audiences with empathy and clear communication.

What We Offer:

• Competitive compensation
• Employee Stock Purchase Plan (ESPP)
• Flying Start - Our immersive Global Induction Program
• Work with brilliant people that will keep you on your toes, learn more about their journeys by checking out #InsideFlywire on social media
• Dynamic & Global Team (we have been collaborating virtually for years!)
• Wellbeing Programs (Mental Health, Wellness) with Global FlyMates
• Be a meaningful part in our success - every FlyMate makes an impact
• Competitive time off including FlyBetter Days to volunteer in a cause you believe in
• Digital Disconnect Days!
• Great Talent & Development Programs

Submit today and get started!

We are excited to get to know you! Throughout our process you can expect to meet with different FlyMates including the Hiring Manager, Peers on the team, the VP of the department, and a skills assessment. Your Talent Acquisition Partner will walk you through the steps and be your “go-to” person for any questions.

Flywire is an equal opportunity employer. With over 30 nationalities across 12 different offices, and diversity and inclusion at the core of our people agenda, we believe our FlyMates are our greatest asset, and we’re excited to watch our unique culture evolve with each new hire.

Flywire is an equal opportunity employer.

#LI-Hybrid