Senior Security Engineer (Offensive) at Flywire in Bangalore

Job description

Are you ready to trade your job for a journey? Become a FlyMate! Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world. What more do we need to truly be unstoppable? Perhaps, that is you! Who we are: Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments. We’ve scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world. Today we support more than 5,100 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies. With over 1,400+ global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow. Job Summary: We, at Flywire, are looking for a Senior Detection and Response Engineer to strengthen our threat detection and incident response capabilities. This is a hands-on technical role: you’ll design, build, and tune the detections that protect a global, cloud-first payments infrastructure, and you’ll be a key technical voice during live incidents, while mentoring other Blue Team engineers. The ideal candidate combines deep technical expertise in detection engineering with the ability to work independently, drive initiatives end to end, and raise the technical bar of the team around them. Are you the kind of person who doesn’t just respond to alerts, but improves the systems that generate them? Do you enjoy turning threat intelligence into detection logic, and are you comfortable taking ownership during a live incident? If so, this is the role for you. Responsibilities and Tasks: Design, develop, and continuously improve detection use cases, alerting logic, and correlation rules across SIEM/SOAR/EDR/DLP platforms. Act as a senior technical responder for security incidents, serving as Incident Commander for medium-severity incidents and as a key technical escalation point, supporting the Lead, in high-severity ones. Contribute to post-incident reviews and drive the resulting remediation actions to completion. Mentor and support junior and mid-level Blue Team engineers through code reviews, knowledge sharing, and day-to-day guidance. Partner with Red Team and Threat Intelligence in purple team exercises, translating findings into improved detection coverage against emerging TTPs. Contribute to the detection roadmap and take ownership of specific detection domains or initiatives. Track and report on detection efficacy metrics (MTTD, MTTR, false-positive rates, MITRE ATT&CK coverage) for your areas of ownership. Collaborate with Engineering, SRE, and IT teams on security tooling, detection integration, and remediation prioritization. Build and maintain automation for detection, triage, and response (SOAR playbooks, scripting, IaC for security tooling). Support audits, risk reviews, and compliance efforts (GDPR, PCI DSS, SOC II) by providing technical evidence and detection/response expertise. Participate in the on-call rotation and after-hours coverage model for the D&R function. Write and maintain security operations playbooks, runbooks, and documentation, ensuring knowledge transfer across the team. Contribute to the evaluation of detection and response tools and technologies. Qualifications: Technical skills: Bachelor’s degree in a related field (or equivalent practical experience) and 5+ years of experience in IT/cybersecurity, including detection engineering, SOC, or incident response r