Senior Product Security Engineer

A senior security engineer on Airwallex's Information Security team, reporting to the Product Security Engineering Manager and working with infrastructure, product and engineering teams. The engineer reviews new and existing applications and services and drives security fixes, designs and tests new controls, builds detection strategies and response workflows, hunts through endpoint, network, cloud and authentication logs, investigates and responds to incidents, collects and preserves forensic evidence, assesses systems for misconfigurations and vulnerabilities, and runs security infrastructure projects.

Airwallex wants five or more years in security engineering or incident response at a tech company, deep experience with a major cloud platform, knowledge of CI/CD tooling, and a thorough understanding of attacker techniques; OSCP or GIAC certifications, Splunk and Kubernetes experience help. Based in San Francisco.