Lead Security Engineer

Core responsibilities:

• Own Swiftly's security risk register and threat models; identify, prioritize, and drive remediation of risks across application and infrastructure
• Design secure architectures for SaaS platform, mobile applications, and IOT/Hardware Integration, focusing on authentication, authorization, data protection, and network boundaries
• Build DevSecOps guardrails into CI/CD pipelines to surface vulnerabilities, misconfigurations, and license issues early
• Lead compliance initiatives including SOC 2 renewals and new certifications for international expansion

This role helps cities move more efficiently by securing the transit data platform that improves on-time performance by up to 40% and increases passenger information accuracy by up to 50%, resulting in better service reliability, increased ridership, and more efficient transit operations.

Required qualifications:

• 5+ years of experience in security engineering with both strategic and hands-on work
• Strong experience securing cloud-native environments (AWS preferred), including IAM, networking, logging/monitoring, and secrets management
• Hands-on experience with infrastructure-as-code (Terraform) and policy-as-code frameworks
• Background building security into CI/CD pipelines and development workflows
• Experience with compliance frameworks (SOC 2 preferred) and audit processes
• Excellent threat modeling and risk assessment skills
• Strong communication skills across technical and non-technical teams

Benefits include:

• Competitive salary with equity compensation for every employee
• Medical, Dental and Vision insurance
• Retirement with Employer Match
• Flexible Spending Account (FSA)
• Home office setup reimbursement
• Monthly cell/internet reimbursement
• Monthly "Be Well" stipend
• Flexible PTO with recommended minimum
• Flexible work environment
• 16 paid holidays
• 8 fully paid weeks of leave for child birth/adoption

Swiftly is on a mission to help cities move more efficiently as the leading transit data platform for agencies to share real-time passenger information, manage day-to-day operations, and improve service performance. Over 180 transit agencies in 12 countries rely on Swiftly to improve transit operations.