Swift · 4 months ago
Lead Application Security Engineer
Swift is the world’s leading provider of secure financial messaging services, headquartered in Belgium. They are seeking a Lead Application Security Engineer to be the security expert for developers building core systems, focusing on security architecture, code reviews, and integrating security into development workflows.
Financial ServicesSecurity
Responsibilities
Lead comprehensive security architecture reviews for Swift's applications across all business domains
Conduct advanced code security reviews with developers across Java, JavaScript, C++, and emerging programming languages including Python
Lead business security assessments for our most critical applications and figure out what security controls we need based on business requirements
Optimize and evolve DevSecOps tools within CI/CD pipelines to reduce false positives and improve developer adoption
Partner with 75+ developers across API and Identity teams to integrate security seamlessly into agile development workflows
Take complex security requirements and make them practical for development teams - some teams are security-savvy, others need more guidance
Champion security best practices through technical mentorship, training sessions, and documentation that scales across multiple development squads
Collaborate with architecture teams to establish security patterns and standards for all domains in application security
Drive continuous improvement initiatives to enhance developer security tooling and reduce friction in secure development practices
Build metrics and reports that show how well our security efforts are working and where we're reducing risk
Stay ahead of emerging threats specific to financial services applications and infrastructure
Leverage deep knowledge of financial services threat landscape and attack vectors specific to payment systems and financial messaging
Qualification
Required
Bachelor's degree
8 years of hands-on application security experience with demonstrated expertise in secure coding, vulnerability assessment, and security architecture
Advanced proficiency in Java, JavaScript, C++, and Python (emerging) with strong understanding of secure coding practices and common vulnerability patterns in these languages
Extensive experience with application security testing tools (SAST, DAST, IAST, SCA) and their integration into automated CI/CD pipelines
Proven experience in threat modeling and security design sessions for complex applications and systems
Strong background in conducting advanced code security reviews and vulnerability assessments
Strong background in API security including OAuth, JWT, rate limiting, API gateway security, and RESTful service protection
Understanding of financial services, regulatory compliance requirements and security standards relevant to global financial messaging systems
Experience with security automation, security-as-code practices, and CI/CD security integration
Knowledge of container security and securing microservices architectures in on-premises environments
Proven ability to influence and mentor development teams without direct management authority
Experience working in complex organizational structures and building consensus across multiple stakeholder groups
Strong written and verbal communication skills with ability to explain technical security concepts to both technical and business audiences
Track record of driving adoption of security practices in fast-paced development environments
Preferred
Professional security certifications demonstrating hands-on technical skills (GWEB, OSCP, or similar technical certifications)
Experience with emerging programming languages and security frameworks
Background in financial services, fintech, or other highly regulated industries
Benefits
Medical, dental, vision and life insurance with no premium costs for our employees and their families
Retirement plan plus matching 401k
Company
Swift
SWIFT is a member-owned cooperative through which the financial world conducts its business operations with speed, certainty and confidence.
Funding
Current Stage
Late StageRecent News
The Motley Fool
2025-10-22
The Motley Fool
2025-10-07
Company data provided by crunchbase