We are looking for a Staff Security Engineer to strengthen the security of our products, data and engineering platform. This is a highly technical and hands-on role. You will work closely with Engineering teams to continuously harden our systems while helping design the next generation of our security architecture.
🏢 About Swile
Swile is a company focused on building security platforms, not security processes.
🎯 The Role
You will operate across two horizons: strengthen security today and build the privacy architecture of tomorrow. The ultimate objective is to make Swile harder to breach and make a breach increasingly uninteresting.
✅ Key Responsibilities
Identify and reduce high-impact security risks across our applications, APIs and internal tools.
Strengthen authentication, authorization and access controls.
Improve the protection of sensitive and personal data.
Design controls that limit the blast radius of compromised accounts, services or infrastructure.
Improve security monitoring, auditability and detection of suspicious access patterns.
Perform threat modelling and targeted security reviews.
Build reusable security capabilities directly into our engineering platform and development lifecycle.
Contribute to long-term architectures around data isolation, encryption, tokenisation and privacy-preserving systems.
Partner with engineering teams to address systemic security risks rather than individual findings.
📌 Required Qualifications
You are first and foremost a strong engineer.
You have significant experience building or securing production software and distributed systems.
You are comfortable reading and writing production code, designing systems and working directly with Engineering teams.
You have deep security engineering expertise and strong experience in several of the following areas: Application and Product Security, API Security, IAM, authentication and authorization, OAuth2 / OIDC, WebAuthn / FIDO2, RBAC / ABAC and privilege management, Cloud security, Cryptography, KMS / HSM and envelope encryption, Tokenisation and secrets management.
