Security Engineer, Insider Risk

About the role

This position involves safeguarding Airwallex's global payment ecosystem and workforce from internal and external threats. You will focus on identifying, investigating, and mitigating risks posed by both malicious insiders and external fraud actors. This role is crucial for protecting the company's substantial payment infrastructure.

Key facts

What you'll do

• Develop and maintain advanced detection rules and automated responses for insider and fraud risks, using behavioral analytics, anomaly detection, and rule-based logic.
• Analyze user, system, and financial data to uncover complex fraud schemes and potential misuse by insiders or privileged users.
• Provide insights into evolving fraud trends and trusted insider behaviors to enhance Airwallex's proactive security measures.
• Guide team members on advanced detection strategies, fraud taxonomy, and the overall fraud/insider threat lifecycle.
• Lead the creation and refinement of effective detection signatures and analytics across SIEM, EDR, DLP, and payment monitoring platforms.
• Support incident response and digital forensics activities.
• Identify and reduce risks like account misuse, privilege escalation, and social engineering within the organization.
• Collaborate with fraud analysts, KYC operations, compliance, and the broader security team to improve high-risk workflows.
• Create, maintain, and implement detection logic for insider and fraud scenarios.
• Share best practices in threat modeling and detection with the engineering team, supporting their growth in fraud and insider risk.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 3 years of practical experience in security engineering or detection engineering, with a focus on insider threat or fraud risk, preferably in financial or high-growth technology settings.
• Direct experience building, tuning, and operating detection and monitoring solutions such as SIEM, EDR, DLP, user behavior analytics, and fraud detection platforms.
• Expertise in designing and implementing DLP controls and correlating data exfiltration techniques with insider scenarios.
• Familiarity with modern cloud-native architectures and their impact on identity, access, and monitoring.
• Experience coordinating incident response and digital forensics.

Nice to have

• Experience in Fintech, payment, or regulated environments managing significant fraud or insider risk volumes.
• Strong background in digital forensics, transaction analysis, and linking forensic evidence to potential business impact.
• Understanding of regulatory requirements, compliance best practices, and incident disclosure obligations for financial institutions.

Skills & tools

• SIEM
• EDR
• DLP
• User behavior analytics
• Fraud detection platforms
• Cloud-native architectures
• Digital forensics

Practical notes

Airwallex does not request bank details, sensitive ID numbers, or payment during the application process. All official communication will originate from an @airwallex.com email address. Apply only through careers.airwallex.com or the official LinkedIn page. Unsolicited resumes from recruiters are not accepted, and no fees will be paid unless a prior agreement exists.