Senior Product Security Engineer (Fintech)

Location: Shanghai, China; onsite in the Shanghai office 5 days a week

Salary: CN¥700K–CN¥900K per year, plus equity and bonus opportunities

Company

Airwallex is an AI-native financial operating system providing global payments infrastructure and financial products for more than 675,000 businesses across North America, Europe, the Middle East, and Asia-Pacific.

What you will do

• Partner with Infrastructure, Product, and Engineering teams to strengthen the security of applications, software, services, systems, and networks.
• Build and improve security controls, detection strategies, incident response workflows, and cybersecurity infrastructure.
• Investigate cybersecurity incidents and hunt for threats across endpoint, network, and cloud data.
• Assess vulnerabilities, configuration deviations, and policy gaps, then support mitigation and remediation.
• Collect, examine, and preserve digital forensic evidence using analytical and investigative techniques.

Requirements

• 5+ years of experience in security engineering or incident response within a technology company.
• In-depth experience with at least one major cloud platform.
• Strong knowledge of software development tools and infrastructure, including CI/CD tooling and pipelines.
• Comprehensive understanding of attacker tools and techniques, including detection, prevention, and high-quality incident response.
• Experience analysing applications, software, services, systems, and networks to identify vulnerabilities, configuration deviations, and policy gaps.
• Experience designing, testing, implementing, deploying, and maintaining cybersecurity infrastructure and controls.
• Experience with incident response, threat hunting, detection engineering, tactical forensic analysis, or defensive operations.
• Strong communication skills for explaining technical security and software concepts to non-technical audiences.
• Self-motivation, willingness to learn, and a passion for solving complex challenges in high-growth startups.

Nice to have

• Bachelor’s degree in Cybersecurity, Computer Science, or a similar field.
• Cybersecurity training or certifications such as OSCP, GIAC, or CEH.
• Strong experience with Splunk and other security monitoring tools.
• DevOps or SRE experience with Kubernetes.
• Experience with GCP or Alibaba Cloud, with or without certification.
• Experience with Okta, GSuite, and cloud-based VPN services.
• Experience with Python, Java, or Kotlin.
• Published cybersecurity articles, journal papers, or blogs.

Culture & Benefits

• Work onsite from the Shanghai office five days per week.
• Own the security roadmap and outcomes, act independently, and solve ambiguous problems from first principles.
• Work with an InfoSec team protecting hundreds of thousands of customers and hundreds of billions of dollars.
• Build security capabilities internally, including AI-driven defensive solutions, rather than relying primarily on off-the-shelf tools.
• Full-time employment with equity and bonus opportunities.

Hiring process

• Apply only through careers.airwallex.com or Airwallex’s official LinkedIn page.
• Airwallex does not accept unsolicited resumes from search firms or recruiters.
• Official communication will come from an @airwallex.com email address; no bank details, sensitive ID numbers, or payments are requested during recruitment.