Senior Product Security Engineer

The role

You will protect products, infrastructure, systems, and data from cybersecurity threats. You will work with Infrastructure, Product, and Engineering teams to design security controls and investigate incidents.

What you will do

• Partner with Infrastructure, Product and Engineering teams to strengthen security of applications, software and services.
• Build and improve security controls, detection strategies and incident response workflows.
• Investigate cybersecurity incidents and hunt for threats across endpoint, network and cloud data.
• Design, deploy and maintain cybersecurity infrastructure projects.
• Assess systems and networks for vulnerabilities, configuration deviations and policy gaps.
• Collect, examine and preserve digital forensic evidence.

Required qualifications

• 5+ years’ experience in security engineering or incident response within a technology company
• In-depth experience with at least one major cloud platform
• Strong knowledge of software development tools and infrastructure, including CI/CD tooling and pipelines
• A comprehensive understanding of common attacker tools and techniques, how to detect and prevent them, and how to respond to incidents
• Experience analysing applications, software, services, systems and networks to identify vulnerabilities, configuration deviations and policy gaps
• Experience designing, testing, implementing, deploying and maintaining cybersecurity infrastructure and controls
• Experience with incident response, threat hunting, detection engineering, tactical forensic analysis or defensive operations
• Strong communication skills to explain technical security and software concepts to a non-technical audience
• A passion for solving complex challenges in high-growth startups
• Self-motivation and drive to learn new skills or deepen existing ones

Nice to have

• A bachelor’s degree in Cybersecurity, Computer Science or a similar field
• Recognised cybersecurity training or certifications, such as OSCP, GIAC or CEH
• Strong experience with Splunk and other security monitoring tools
• DevOps or SRE experience with Kubernetes
• Experience with GCP or Alibaba Cloud, with or without certification
• Experience with Okta, GSuite and cloud-based VPN services
• Experience with Python, Java or Kotlin
• Published articles, journal papers or blogs related to cybersecurity

About the company

Airwallex is an AI-native financial operating system for a real-time, intelligent economy. It provides financial infrastructure for businesses across North America, Europe, the Middle East, and Asia-Pacific.