Lead Security Engineer

Job not on LinkedIn

2 hours ago

Apply Now
Logo of Swiftly, Inc.

Swiftly, Inc.

Transport • Software

Swiftly, Inc. is a company that specializes in enhancing public transit through a comprehensive data platform. Their services focus on improving real-time passenger information, operational efficiency, and predictive insights for transit agencies. With a digital platform that supports transit management, Swiftly provides tools to optimize scheduling, planning, and customer service in public transport. The company aims to streamline the flow of information and enhance the decision-making process for transit operators to boost the overall passenger experience.

51 - 200 employees

đźš— Transport

đź’° Private Equity Round on 2020-12

đź“‹ Description

• Own Swiftly's security risk register and threat models; identify, prioritize, and drive remediation of risks across application and infrastructure. • Design secure architectures for our SaaS platform, mobile applications, and IOT/Hardware Integration, focusing on authentication, authorization, data protection, and network boundaries. • Recommend, implement, and manage security tools end-to-end. • Build DevSecOps guardrails into CI/CD so vulnerabilities, misconfigurations, and license issues surface early. • Conduct internal security assessments and coordinate engagements with external penetration testers. • Own security policies and standards; ensure they're practical, adopted, and measurable. • Define standards for secure adoption of AI coding assistants, building reusable patterns, custom configurations, and guardrails that help developers move fast safely. • Lead renewals and continuous readiness for existing certifications like SOC 2. • Proactively identify security frameworks required for international expansion; scope cost, level of effort, and timelines to inform market entry decisions; and lead execution of new certifications. • Respond to customer security and compliance inquiries and support product marketing with security content. • Design and maintain security incident response plans, playbooks, and escalation paths. • Serve as an escalation point for security incidents; lead triage, root cause analysis, and remediation. • Define and maintain security KPIs and dashboards for executive and board reporting. • Give teams visibility into their security posture and coach them to improve. • Influence roadmap prioritization to ensure security and compliance are first-class concerns. • Mentor engineers in secure design and help grow a security-aware culture across Swiftly by delivering security training and office hours for developers and other stakeholders. • Drive corporate IT security strategy, including endpoint hardening, email security, IAM standards, and periodic access reviews.

🎯 Requirements

• 5+ years of experience in security engineering with both strategic and hands-on work • Strong experience securing cloud-native environments (AWS preferred), including IAM, networking, logging/monitoring, and secrets management • Hands-on experience with infrastructure-as-code (Terraform) and policy-as-code frameworks (OPA, Sentinel, or similar) • Background building security into CI/CD pipelines and development workflows • Familiarity with container and orchestration security • Excellent threat modeling and risk assessment skills; able to translate complex risks into clear options and tradeoffs • Experience with compliance frameworks (SOC 2 preferred) and audit processes • Strong communication skills; comfortable working across technical and non-technical teams • Self-directed and comfortable operating with autonomy.

🏖️ Benefits

• Competitive salary • Equity compensation (company ownership) for every employee • Medical, Dental and Vision • Retirement with Employer Match • Flexible Spending Account (FSA) • Home office setup reimbursement • Monthly cell/internet reimbursement • Monthly "Be Well" stipend • Flexible PTO with a recommended minimum • Flexible work environment • 16 paid holidays - including months without US national holidays • 8 fully paid weeks of leave for child birth/adoption

Apply Now

Similar Jobs

11 hours ago

Security Consultant II ensuring customer support and integration of Akamai's products. Acting as a trusted advisor and delivering high-quality services to clients through effective collaboration.

Cyber Security

DNS

TCP/IP

18 hours ago

AECOM

10,000+ employees

Senior Safety & Security Officer overseeing transit safety and security certification processes for AECOM. Managing documentation, design reviews, and annual plans across projects in Austin, TX.

20 hours ago

Senior Manager for Privacy and Information Security training responsible for educating workforce on risks. Develops training programs and engages employees in cybersecurity responsibilities.

Cyber Security

21 hours ago

Technical Support Engineer providing L1 support for enterprise customers using a behavior AI Cybersecurity platform. Collaborating with Engineering teams to resolve technical issues and enhance customer trust.

Cloud

Cyber Security

Splunk

Yesterday

Control System Cybersecurity Project Manager specializing in cybersecurity for Operational Technology. Leading project planning, execution, and delivery while ensuring scope, schedule, budget, and risk management.

Cyber Security

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com