Platform Security Engineer — Architecting Privacy

Swile; Toulouse; Hybride; EUR 110 000 - 160 000; Plein temps

Résumé du poste

Swile is seeking a Staff Security Engineer to strengthen the security of its products, data and engineering platform. This is a highly technical and hands-on role, working closely with engineering teams to harden systems and design the next generation of security architecture.

You will operate across two horizons: today’s security hardening and tomorrow’s privacy architecture, with cryptographic isolation and minimal data exposure.

Qualifications

• Significant experience building or securing production software and distributed systems.
• Comfortable reading and writing production code, designing systems and working directly with Engineering teams.
• Deep security engineering expertise across multiple areas listed.

Responsabilités

• Identify and reduce high-impact security risks across applications, APIs and internal tools.
• Strengthen authentication, authorization and access controls.
• Improve the protection of sensitive and personal data.
• Design controls that limit blast radius of compromised accounts, services or infrastructure.
• Improve security monitoring, auditability and detection of suspicious access patterns.
• Perform threat modelling and targeted security reviews.
• Build reusable security capabilities into the engineering platform and lifecycle.
• Contribute to long-term architectures around data isolation, encryption, tokenisation and privacy-preserving systems.
• Partner with engineering teams to address systemic security risks.

Connaissances

Application security

API security

IAM authentication

OAuth2 / OIDC

WebAuthn / FIDO2

RBAC / ABAC

Cloud security

Cryptography

Threat modelling

Security monitoring

Outils

KMS/HSM

Envelope encryption

Description du poste

Swile is seeking a Staff Security Engineer to strengthen the security of its products, data and engineering platform. This is a highly technical and hands-on role, working closely with engineering teams to harden systems and design the next generation of security architecture.

You will operate across two horizons: today’s security hardening and tomorrow’s privacy architecture, with cryptographic isolation and minimal data exposure.