Passion, excitement & global collaboration are all core to what it means to be a FlyMate. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world.
Flywire is a global payments enablement and software company, founded a decade ago to solve high-stakes, high-value payments in education, using modern technology. Today, we've digitized payments for more than 3,300+ global clients across education, healthcare, travel & B2B, covering more than 240 countries and territories and supporting over 140 currencies. With over ****+ global FlyMates, representing more than 40 nationalities, and in 14 offices world-wide, we're looking for FlyMates to join the next stage of our journey as we continue to grow.
Flywire is seeking an eager and skillful Application Security Engineer to join our elite Security Team. You will support our security efforts across our integral development houses, ensuring the privacy and safety of our most confidential business and personal information.
At Flywire, we don't just "check for bugs"-we build security into the heart of our products. Your mission is to ensure security is never an afterthought. Security by Design & Architecture
Draft comprehensive security requirements for every new system, service, or integration needed by Flywire.
Lead the Blueprint:



Own the threat modeling and secure architecture initiatives to prevent vulnerabilities at the design stage.
Embed with Teams: Attend engineering syncs and collaborate frequently with different squads to identify and address security issues in real-time.
Full-Stack Reviews: Perform deep-dive security reviews, from meticulous source code auditing to dynamic testing of live applications.
Execute technical tasks on change and integration reviews to ensure security-first deployments.
End-to-End Ownership: Be an active part of the secure software development lifecycle (S-SDLC).
4+ years in Application Security (AppSec).
Proven experience performing web application penetration tests and vulnerability research.
Strong skills in source code auditing and development of custom security tools.
Deep-dive Pentesting & Source Code Auditing: Proficiency in Ruby on Rails, Python, Bash, Java, Node.js, among others, focusing on identifying vulnerabilities at the logic and code level.
Ability to think like an attacker to identify flaws while effectively crafting mitigating controls.
Modern Standards: Deep understanding of OWASP Top 10 and the OWASP Top 10 for LLM Applications (AI-driven security).
Knowledge of security audit certifications such as PCI-DSS, SOC 1, and SOC 2.
Flying Start - Our immersive Global Induction Program
Dynamic & Global Team (we have been collaborating virtually for years!)
Wellbeing Programs (Mental Health, Wellness) with Global FlyMates
Digital Disconnect Days!

📌 Security Engineer - Windows (Lérida)
🏢 Talantir
📍 Lérida