Security Engineer II (Defensive Operations)
for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to map content accordingly.
We have:
- Intro paragraph about FlyMate, mission etc. Could be "About the role" maybe? Actually "About the role" could be the description of role and company. We'll put that in About the role
with
containing the intro paragraphs up to "Job Description". But we must not repeat job title as heading. The job title is Security Engineer II. We'll not use that as heading. We need sections: Responsibilities (Key Responsibilities). Qualifications (Basic Qualifications and Preferred Qualifications). Skills maybe from qualifications? Could combine but we can have Qualifications section covering both basic and preferred. Benefits and Pay: we have salary range and benefits mention. So we can have Pay section with salary range, Benefits section with mention of benefits (though not detailed). Schedule: not mentioned, so omit. We must not include boilerplate like EEO, equal opportunity, application instructions, etc. Remove "Submit today and get started! ..." and equal opportunity paragraph. Also remove "Additional Information" heading but keep salary and benefits content. We need to preserve all substantive information. So we need to include the salary range and benefits statement. Let's extract substantive content: Intro paragraphs: "Are you ready to trade your job for a journey? Become a FlyMate! Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world. What more do we need to truly be unstoppable? Perhaps, that is you! Who we are: Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments in higher education. We’ve since scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world. Today we support more than 5,300 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies. With over 1,400 global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow." Then "Job Description At Flywire, we are looking for a Security Engineer II to join our global Security Engineering team. In this role, you will serve as a technical authority owning secure software design, cloud-native infrastructure defense, offensive penetration testing, and real-time incident detection across Flywire’s global footprint. You will combine a "breaker" mindset with a builder’s engineering empathy, operating fluidly across the entire product and infrastructure security lifecycle. This role demands an "automation-first" approach embedded within a high-velocity fintech ecosystem. You will actively partner with software engineering and SRE squads to integrate security controls directly into our public cloud and GitLab CI/CD pipelines using AI workflows. Simultaneously, you will serve as an operational responder for threat detection engineering, red team penetration testing, and live incident containment." Then "Key Responsibilities:" list bullet points. Then "Qualifications Basic Qualifications:" list. Then "Preferred Qualifications / Certifications:" list. Then "Additional Information Submit today and get started! ..." then EEO paragraph then salary range. We need to remove "Submit today and get started! ..." and EEO paragraph. We keep salary range: "The US base salary range for this full-time position is $99,000 - 120,000 and benefits. Our salary ranges are determined by role, position level, and location. The range displayed on this job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and several other factors, including job-related skills, experience, relevant education and training." We also have "benefits" mentioned but not detailed. We'll create Benefits section with that sentence? Actually benefits mention is just "and benefits." Could be vague. But we need to include only if posting actually states them. It does state "and benefits." So we can include a Benefits section with that phrase. Pay section: include salary range details. Now structure:
About the role
Intro paragraphs (up to before Job Description? Actually we include the company overview and mission etc.) Could combine the intro and job description? But we have separate sections for Responsibilities etc. So About the role could contain the introductory description of Flywire and the role overview (the Job Description paragraph before Key Responsibilities). Let's include that. Thus About the role
includes: "Are you ready to trade your job for a journey? Become a FlyMate! Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world. What more do we need to truly be unstoppable? Perhaps, that is you! Who we are: Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments in higher education. We’ve since scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world. Today we support more than 5,300 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies. With over 1,400 global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow. Job Description At Flywire, we are looking for a Security Engineer II to join our global Security Engineering team. In this role, you will serve as a technical authority owning secure software design, cloud-native infrastructure defense, offensive penetration testing, and real-time incident detection across Flywire’s global footprint. You will combine a "breaker" mindset with a builder’s engineering empathy, operating fluidly across the entire product and infrastructure security lifecycle. This role demands an "automation-first" approach embedded within a high-velocity fintech ecosystem. You will actively partner with software engineering and SRE squads to integrate security controls directly into our public cloud and GitLab CI/CD pipelines using AI workflows. Simultaneously, you will serve as an operational responder for threat detection engineering, red team penetration testing, and live incident containment." That seems fine. Then
Responsibilities
with- each bullet from Key Responsibilities. We need to preserve bullet content exactly. Bullet list: - Secure SDLC & CI/CD Automation: Own, design, and drive the end-to-end integration of automated technical security requirements and validation tools into high-velocity engineering pipelines. Build custom internal tooling, wrappers, and automated controls to maximize development velocity without friction. - SRE & Cloud Infrastructure Hardening: Partner directly with SRE and DevOps teams to establish secure cloud architecture blueprints, manage Infrastructure-as-Code (IaC) security scans (Terraform), and enforce Zero Trust boundaries in containerized environments (Docker/Kubernetes). - AI-Driven Security & Governance: Design and deploy automated security review workflows using LLM APIs (e.g., Claude). Establish controls to protect generative AI features against prompt injection, insecure output handling, model inversion, and data poisoning. - Offensive Penetration Testing & Red Teaming: Adopt an attacker's mindset to discover logic flaws, perform exploit research, and emulate zero-day adversarial behavior across financial platforms through manual source code audits, API exploitation, and cloud penetration testing. - Incident Response & Threat Detection: Lead technical containment, forensic collection, and rapid threat eradication during active security incidents. Design and deploy high-fidelity detection rules and automated alert workflows within the SIEM environment. - Cross-Functional Collaboration & Mentorship: Embed within software development and infrastructure sprint planning from inception to ensure security is built-in from day one. Provide actionable code modifications and mentor junior engineers. We'll put each as
- .
Then
Qualifications
with maybe sub-sections? But we can just list Basic Qualifications and Preferred Qualifications as separate- under same heading? Could also split into Requirements and Skills but we follow instruction: use headings only when posting has real specific content. We have Basic Qualifications and Preferred Qualifications. Could combine into one Qualifications section with two lists: Basic Qualifications and Preferred Qualifications. We'll include headings inside? Not allowed to add extra headings beyond the specified ones? The instruction says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but better to stick to those. We could put Basic Qualifications as
? Not allowed. Safer to just put the content under Qualifications heading, with paragraphs and lists. We can include a paragraph: "Basic Qualifications:" then list. Then another paragraph: "Preferred Qualifications / Certifications:" then list. We'll preserve the content. Basic Qualifications content: - Education: Bachelor’s degree in Computer Science, Cyber Security, Software Engineering, or a related technical discipline (or equivalent experience). - Experience: 3+ years of progressive engineering experience moving fluidly between Application Security, Cloud Architecture Defense, and Active Security Operations (SecOps/Incident Response/Penetration Testing). - Advanced Exploitation & Defense: Proven track record of independently performing deep manual penetration testing, web application exploitation, and incident containment without relying solely on commercial automated scanners. - Cloud & DevOps Stack: Strong practical knowledge of AWS or public cloud topologies, containerization (Docker, Kubernetes), network security, and building/maintaining GitLab CI pipelines. - Programming Languages: Foundational proficiency with modern web development frameworks and programming languages including Python, Ruby on Rails, Java, or Node.js. - AI & Security Domains: Solid understanding of the OWASP Top 10 for LLMs framework, applied cryptography, cloud network isolation, and federated authentication architectures (OAuth2, SAML, OIDC, Zero Trust IAM). - SecOps & Forensics: Working proficiency with modern EDR platforms, SIEM systems, network packet analysis (PCAP), threat intelligence frameworks (MITRE ATT&CK), and forensic collection tools. - Compliance: Practical experience aligning technical software and infrastructure controls with standards like PCI-DSS (v4.0), SOC 1, SOC 2, or DORA. Preferred Qualifications / Certifications: - Offensive/Red Team: OSCP, OSCE, or SANS GXPN. - Cloud & Architecture: AWS Certified Security - Specialty, CKS (Certified Kubernetes Security Specialist), or CISSP. - Incident Response: GCIH, GCFA, or specialized Blue Team certifications. - AI Security: OffSec OSAI. We'll put each as list items. Then
Pay
withcontaining salary range details. Then
Benefits
withcontaining "The US base salary range for this full-time position is $99,000 - 120,