Swift
Lead Application Security Engineer
At a Glance
About This Role
Source: Swift careers · View original posting
Responsibilities
- Lead comprehensive security architecture reviews for Swift's applications across all business domains
- Conduct advanced code security reviews with developers across Java, JavaScript, C++, and emerging programming languages including Python
- Lead business security assessments for our most critical applications and figure out what security controls we need based on business requirements
- Optimize and evolve DevSecOps tools within CI/CD pipelines to reduce false positives and improve developer adoption
- Partner with 75+ developers across API and Identity teams to integrate security seamlessly into agile development workflows
- Take complex security requirements and make them practical for development teams
- Champion security best practices through technical mentorship, training sessions, and documentation
- Collaborate with architecture teams to establish security patterns and standards
- Drive continuous improvement initiatives to enhance developer security tooling
- Build metrics and reports that show security efforts and risk reduction
- Stay ahead of emerging threats specific to financial services applications
- Leverage deep knowledge of financial services threat landscape
Requirements
- Bachelor's degree
- 8 years of hands-on application security experience
- Advanced proficiency in Java, JavaScript, C++, and Python
- Extensive experience with application security testing tools (SAST, DAST, IAST, SCA)
- Proven experience in threat modeling and security design
- Strong background in code security reviews and vulnerability assessments
- Strong background in API security
- Understanding of financial services regulatory compliance
- Experience with security automation and CI/CD security integration
- Knowledge of container security and microservices architectures
- Ability to influence and mentor development teams
- Experience in complex organizational structures
- Strong communication skills
Benefits & Perks
About Swift
Swift, formally known as the Society for Worldwide Interbank Financial Telecommunication, is a global cooperative based in La Hulpe, Belgium. Founded in 1973, it is owned by its member financial institutions and governed by central banks. Swift provides secure and reliable financial messaging services that facilitate the exchange of transaction information worldwide, supporting the global economy. The company offers a range of services, including secure solutions for cross-border and domestic payments, messaging for securities transactions, and support for treasury operations and foreign exchange. Swift also provides tools for risk and compliance, ensuring adherence to regulatory requirements. Its platform includes innovative features like Swift GPI for enhanced payment tracking and ISO 20022 messaging standards. With over 50 specialized products, Swift emphasizes digital transformation and security, serving more than 11,000 member institutions globally.
Security at Swift
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Swift's AppSec mission, as seen through its Customer Security Programme (CSP), is to help financial institutions ensure their defences. The company's oversight objectives focus on risk identification, management, and information security. They acknowledge that the cyber threat landscape evolves, and so does the CSP. Information regarding developer enablement vs. gatekeeping is not publicly available, and no explicit public statements were found on internal AppSec philosophy language.”
Security Team
Swift's Executive Committee is chaired by the CEO, with leaders including the CTO and Chief Risk and Control Officer, but no explicit AppSec reporting line is publicly available. Key public-facing AppSec leaders and team size estimates are not publicly available. As of, at least 2 active AppSec job postings were found, referencing application/system management and security roles, such as "Associate Sys - App Mgt - Sup Specialist". The LinkedIn search query used was "Swift Application Security"site:linkedin.com. There is no clear public organizational chart or named AppSec leads.
Key Initiatives
- No evidence was found for a Security Champions Program or explicit public evidence of "Shift Left"practices like pre-commit/IDE/CI security actions.
- For vulnerability management, "Vulnerability scanning is performed in line with the Swift Customer Testing Policy,"and "The outcome of the vulnerability scanning is documented and analysed for appropriate action."Regarding Secure SDLC Artifacts, "Application hardening is conducted and maintained on all in-scope components."No explicit public evidence of new AppSec-specific programs in the last 6 months was found.
- Public documents primarily focus on customer security controls rather than Swift's internal AppSec team operations.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Swift's site