Application Security Engineer

Job Description

We are looking to hire an eager and skilled Application Security Engineer to support our Security Team in providing security support for our development houses and ensuring the privacy and security of confidential business and personal information.

• Security Design & Architecture:
  Draft security requirements for systems, services or integrations, conduct threat modeling and secure architecture initiatives.
• Engineering
  
  Collaboration:
  
  Collaborate with engineering teams to identify and address security issues, attending engineering syncs to ensure security is built-in.
• Full-Stack Reviews:
  Perform technical tasks on change and integration reviews, including full security reviews from source code auditing to live application testing.
• Automation & SDLC:
  Contribute to automated security controls and participate in all aspects of the secure software development lifecycle (S-SDLC).
• Technical Guidance:
  Provide hands‑on remediation guidance and perform technical lead tasks with other team members.

• 4+ years in App Sec with proven experience performing web application penetration tests and vulnerability research.
• Skills in source code auditing, product assessments and development of security tools.
• Security mindset: ability to think like an attacker, identify flaws and craft mitigating controls.
• Practical knowledge of OWASP Top 10 for LLM Applications (Prompt Injection, Insecure Output Handling, etc.).
• Experience with authentication: OAuth, SAML, SSO.
• General knowledge of applied cryptography.
• Familiarity with cloud technologies and containerization.
• Experience with SAST/DAST/SCA tools and integrating them into Dev Sec Ops  pipelines.
• Ability to implement security guardrails for AI‑driven features and validate model integrity (nice to have).
• Knowledge of security audit certifications like PCI‑DSS, SOC 1, SOC 2.
• Soft skills:
  
  ability to explain complex technical findings to both technical and non‑technical audiences with empathy and clear communication.

• Competitive compensation
• Employee Stock Purchase Plan (ESPP)
• Flying Start - Global Induction Program
• Dynamic & Global Team
• Wellbeing Programs (Mental Health, Wellness)
• Competitive time off including Fly Better Days to volunteer
• Digital Disconnect Days
• Great Talent & Development Programs

Flywire is an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, or any other protected characteristic.