Security Engineer II

Remitly•Seattle, WA

23h•Hybrid

About The Position

At Remitly, we believe everyone deserves the freedom to access, move, and manage their money wherever life takes them. Since 2011, we've tirelessly delivered on our promise to customers sending money globally, providing secure, simple, and reliable ways to manage their money, ensuring true peace of mind. Whether it's supporting loved ones back home, growing a business across continents, or pursuing new opportunities abroad, we're not just here to move money— we're here to move our global customers forward. We're looking for builders, reimaginers, and global thinkers who want to work at the intersection of technology, trust, and transformation. If that's you and you're ready to do the most meaningful work of your career—we invite you to join over 2,800 passionate Remitlians worldwide who are united by our vision to transform lives with trusted financial services that transcend borders. About the Role: We are looking for a Security Engineer specializing in Penetration Testing to help strengthen the security posture of our applications, infrastructure, and cloud environments. In this role, you will conduct penetration testing and security assessments, identify vulnerabilities, validate remediation efforts, and partner closely with engineering teams to improve security across the organization. This role is ideal for someone passionate about penetration testing, offensive security, secure design and continuous improvement.

Requirements

3+ years of experience in Security with 2+ years in penetration testing or offensive security.
Bachelor’s degree in Computer Science, Information Security, or related discipline.
Strong understanding of: Web app, API and Mobile app security concepts
Authentication and authorization mechanisms
Network security fundamentals
Experience with penetration testing tools such as: Burp Suite, DAST and SAST tools
Familiarity with any of the scripting or programming languages.
Strong report writing and communication skills.
Ability to clearly explain technical risks to engineering and business stakeholders.
Familiarity with secure code review practices

Responsibilities

Perform penetration tests against: Web applications, APIs, Mobile applications, Cloud environments (AWS) and networks
Identify, validate, and document security vulnerabilities with clear reproduction steps and remediation guidance.
Collaborate with development and product teams to prioritize and remediate findings.
Develop and maintain penetration testing methodologies, tooling, and automation.
Perform red team style exercises and simulate real-world attack scenarios.
Validate remediation activities through retesting.
Research emerging threats, vulnerabilities, and offensive security techniques.
Participate in incident response investigations when needed.
Contribute to security awareness and training initiatives.