Security Engineer, Security Operations

The Opportunity

We, at Flywire, are looking for a BlueTeam Guy with a passion for tackling big problems. We need a BlueTeam Guy who can help protect Flywires infrastructure and platform... of course the Flymates also.

The ideal candidate for this role will have experience in security anomaly detection tools and analytical capabilities to be able to implement security alerts and develop new use cases in order to increase preventative security. You also need to be comfortable collaborating closely with the RedTeam and Threat Intelligence teams in order to feed the systems with more relevant information.

Are you the type of person who finds ways to detect threats? Are you passionate about the new concept of cloud security? Are you curious about technology and the hunt for attacker activity? Are you looking for opportunities to learn and educate your talented peers and are you really excited to get constructively involved? If so, we have the perfect position for you.... Youll need a desire to tinker until its reliable, robust and secure.

We would like to hire for our Security team a Blue teamer, a successful candidate for this position has technical knowledge and experience performing use cases in dynamic environments.

Candidates will need to be a strong leader with the ability to perform multiple types of analysis including providing mitigation recommendations for impacted parties.

• Implement and deploy new security tools in the environment
• Manage and improve detection tools (SIEM, SOAR, EDR, AV, DLP )
• Purple team exercises, work with the red team to improve the detection and alerts.
• Provide recommendations and solutions to solve the security problems that we found, working closely with the developers team, SRE team and IT team.
• Support implementing new security projects.
• Knowledgeable of current tactics, techniques and procedures (TTP) used by threat actors and practical application of the MITRE ATT&CK framework or similar.
• Work closely with other team members to review existing policy and procedures, as well as developing new artifacts when appropriate.
• Develops and executes network monitoring and security operations
• Participate in on-call functions to support security operations with after-hours coverage.
• Development of security detection and alerting mechanisms.
• Performs necessary investigative and response functions to support security operations
• Automate process and procedures
• Knowledge of development languages (ruby, bash, python )