Lead Security Engineer – AppSec / CloudSec & PenTest / SecOps

Flywire
Boston
Workplace: HybridFull timeUSD 150,000 - 180,000 annuallyFunction: CybersecurityExperience: 8+ yearsEducation: bachelorsSkills: ["Mentorship","Executive communication","Crisis management","Risk prioritization","Commercial drive"]

Set the technical direction for security engineering across AppSec, CloudSec, penetration testing, and SecOps. Serve as senior technical authority, defining strategy and owning security controls integrated into engineering pipelines and cloud infrastructure. Lead penetration testing cadence, guide incident response and post-incident reviews, and provide mentorship to senior and junior engineers. Represent security risk to Cyber leadership and executives while partnering on hiring and resourcing.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Flywire
Flywire
2 days ago

Lead Security Engineer – AppSec / CloudSec & PenTest / SecOps

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 17 hours agoStatus: Live

Job Summary

Set the technical direction for security engineering across AppSec, CloudSec, penetration testing, and SecOps. Serve as senior technical authority, defining strategy and owning security controls integrated into engineering pipelines and cloud infrastructure. Lead penetration testing cadence, guide incident response and post-incident reviews, and provide mentorship to senior and junior engineers. Represent security risk to Cyber leadership and executives while partnering on hiring and resourcing.
Location: Boston
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Define and own the technical strategy and roadmap across secure software design, cloud infrastructure defense, offensive testing, and incident detection aligned with Cyber leadership.
  • •Integrate automated security controls into engineering pipelines and cloud infrastructure, setting standards for engineers and owning escalation/final sign-off for complex architecture decisions.
  • •Set the standard and cadence for penetration testing, red team simulations, and detection engineering; act as senior technical escalation during critical incidents.
  • •Lead incident response guidance by directing containment and post-incident review efforts.
  • •Mentor senior and junior security engineers and partner with Talent Acquisition and Cyber leadership on hiring, career ladder structure, and resourcing decisions.

Pay and Benefits

Salary: USD 150,000 - 180,000 annually

Key Requirements

  • •Bachelor's degree in Computer Science, Cyber Security, Software Engineering, or a related technical discipline (Master's preferred).
  • •8+ years of progressive security engineering experience with strong fluency across both defensive and offensive disciplines.
  • •Deep hands-on seniority in application security, cloud architecture defense, penetration testing, or security operations across the full function.
  • •Practical knowledge of AWS/Azure/GCP topologies, containerization/orchestration, GitLab CI pipelines, manual penetration testing, and forensic analysis tools.
  • •Expert-level understanding of OWASP Top 10 for LLMs, applied cryptography, and federated authentication architectures, plus experience aligning controls with PCI-DSS v4.0, SOC 1, SOC 2, and DORA.
Experience:8+ yearsSecurity engineering
Education:Bachelor's in Computer Science, Cyber Security, Software Engineering, or related technical discipline
Skills:MentorshipExecutive communicationCrisis managementRisk prioritizationCommercial drive
Certifications:AWS Certified Security – SpecialtyCKS (Certified Kubernetes Security Specialist)CISSPOSCPOSCESANS GXPNGCIHGCFAOffSec OSAI (Offensive Security AI Red Teamer)
Languages:English
Tech Stack:AWSAzureGCPContainerizationOrchestrationGitLab CIOWASP Top 10 for LLMsApplied cryptographyFederated authentication architecturesPCI-DSS v4.0SOC 1SOC 2DORAIAMZero TrustPenetration testingRed team simulationsForensic analysis toolsIdentity and Access Management (IAM)

Company Brief

Flywire
Provides a global payments platform and vertical-specific software to enable complex cross-border and domestic receivables for education, healthcare, travel and B2B clients, streamlining payments, reconciliation and receivables workflows.
Industry: Payments
Company Size: Enterprise (1,001+ employees)
Revenue: USD 100M to 250M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Boston, United States
Founded: 2009
Glassdoor
Glassdoor: 3.5
WebsiteLinkedInGlassdoor