CorpSec Security Engineer II

Job Description

At Remitly, we believe everyone deserves the freedom to access, move, and manage their money wherever life takes them. Since 2011, we’ve tirelessly delivered on our promise to customers sending money globally, providing secure, simple, and reliable ways to manage their money, ensuring true peace of mind. Whether it’s supporting loved ones back home, growing a business across continents, or pursuing new opportunities abroad, we’re not just here to move money— we’re here to move our global customers forward.

We’re looking for builders, reimaginers, and global thinkers who want to work at the intersection of technology, trust, and transformation. If that’s you and you’re ready to do the most meaningful work of your career, we invite you to join over 2,800 passionate Remitlians worldwide who are united by our vision to transform lives with trusted financial services that transcend borders.

A Security Engineer on Remitly’s Corporate Security team will operate and improve the controls securing our workforce, devices, SaaS and core business applications. The role involves owning work independently, seeking help when needed, and building logical, scalable, and maintainable solutions. Partnering with IT, Detection & Response, Infrastructure Security, and other teams, you’ll execute on the team’s roadmap and help shape what comes next.

• Configure and maintain security controls across internal infrastructure and SaaS (Google Workspace, Okta, Salesforce, Slack, Workday). Identify misconfigurations, fix them, document the fix, and enhance team‑owned security technologies to better support internal assessments.
• Support least‑privilege IAM enforcement across our stack. Validate policy compliance and address gaps with full risk context.
• Write tooling that improves risk detection, expedites response, or eliminates manual steps. Solutions should be logical, scalable, and maintainable, not one‑off scripts.
• Manage and improve MDM policies (Kandji, FleetDM), enforce device trust posture, and support OS hardening baselines.
• Participate in threat models, vendor security assessments, and product design reviews, providing constructive feedback through thorough reviews. Grow toward running these independently.
• Maintain email defense configurations, support OAuth app review workflows, and flag and remediate risky integrations before they become incidents.
• Improve how systems are deployed, tested, logged, and monitored. Refactor where it helps, participate in the team on‑call rotation, and resolve root causes, not just symptoms.
• Write and update runbooks, help define team strategy, explain standards to new hires, and act as an onboarding buddy when needed.

• 3+ years in security or systems engineering, with 1+ year focused in a relevant sub‑domain (identity, endpoint, SaaS security, cloud, etc.) in a cloud‑first environment.
• Proficiency in a programming language (Python preferred; willingness to learn others). Ability to write, review, and build tooling, not just run scripts.
• Proficiency using AI tools (e.g., Claude Code, ChatGPT, Copilot) to accelerate security engineering work, writing automation, analyzing configurations, drafting documentation, and triaging findings.
• Experience managing a project from start to finish: requirements, milestones, triage, deployment.
• Ability to influence other teams to take action on security risks by understanding the entire context and ensuring aligned incentives.
• Knowledge of security industry frameworks relevant to your sub‑domain and how to apply them.
• Real‑world experience mitigating technical risks with enough depth to make recommendations based on business risk level without hand‑holding from stakeholders.
• Clear articulation of risk impact, potential solutions, and trade‑offs.
• Familiarity with IaC (Terraform/Pulumi) or strong willingness to learn fast.

• Hands‑on experience with Okta, Google Workspace admin, MDM, SIEM, endpoint security, SASE/ZTNA.
• Experience with AWS or GCP, with console usage and Cloud Trail log reading.
• Familiarity with Git Hub, CI/CD pipelines, or Kubernetes.
• Exposure to DLP, insider threat tooling, or SaaS posture…