Swift Security Team

Security at Swift

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

“Swift's AppSec mission, as seen through its Customer Security Programme (CSP), is to help financial institutions ensure their defences. The company's oversight objectives focus on risk identification, management, and information security. They acknowledge that the cyber threat landscape evolves, and so does the CSP. Information regarding developer enablement vs. gatekeeping is not publicly available, and no explicit public statements were found on internal AppSec philosophy language.”

The team

Swift's Executive Committee is chaired by the CEO, with leaders including the CTO and Chief Risk and Control Officer, but no explicit AppSec reporting line is publicly available. Key public-facing AppSec leaders and team size estimates are not publicly available. As of, at least 2 active AppSec job postings were found, referencing application/system management and security roles, such as "Associate Sys - App Mgt - Sup Specialist". The LinkedIn search query used was "Swift Application Security"site:linkedin.com. There is no clear public organizational chart or named AppSec leads.

What they're working on

No evidence was found for a Security Champions Program or explicit public evidence of "Shift Left"practices like pre-commit/IDE/CI security actions.
For vulnerability management, "Vulnerability scanning is performed in line with the Swift Customer Testing Policy,"and "The outcome of the vulnerability scanning is documented and analysed for appropriate action."Regarding Secure SDLC Artifacts, "Application hardening is conducted and maintained on all in-scope components."No explicit public evidence of new AppSec-specific programs in the last 6 months was found.
Public documents primarily focus on customer security controls rather than Swift's internal AppSec team operations.