Staff Security Engineer

About the role

Build security platforms, not security processes

We are looking for a Staff Security Engineer to strengthen the security of our products, data and engineering platform.

This is a highly technical and hands-on role. You will work closely with Engineering teams to continuously harden our systems while helping design the next generation of our security architecture.

You will operate across two horizons:

-

Strengthen security today: continuously harden our applications, access controls and data-protection mechanisms against evolving threats.

-

Build the privacy architecture of tomorrow: move beyond traditional perimeter and access-control security by designing systems where sensitive data is cryptographically isolated, minimally exposed, and increasingly usable without being directly revealed.

The ultimate objective is not simply to make Swile harder to breach. It is to make a breach increasingly uninteresting, because there is less usable data available to steal.

What you will do We want Security Engineering to create capabilities that scale across hundreds of engineers.

You will:

-

Identify and reduce high-impact security risks across our applications, APIs and internal tools.

-

Strengthen authentication, authorization and access controls.

-

Improve the protection of sensitive and personal data.

-

Design controls that limit the blast radius of compromised accounts, services or infrastructure.

-

Improve security monitoring, auditability and detection of suspicious access patterns.

-

Perform threat modelling and targeted security reviews.

-

Build reusable security capabilities directly into our engineering platform and development lifecycle.

-

Contribute to long-term architectures around data isolation, encryption, tokenisation and privacy-preserving systems.

-

Partner with engineering teams to address systemic security risks rather than individual findings.

Where possible, a security requirement should become code rather than documentation.

What we are looking for You are first and foremost a strong engineer.

You have significant experience building or securing production software and distributed systems. You are comfortable reading and writing production code, designing systems and working directly with Engineering teams.

You have deep security engineering expertise and strong experience in several of the following areas:

-

Application and Product Security

-

API Security

-

IAM, authentication and authorization

-

OAuth2 / OIDC, WebAuthn / FIDO2

-