Cyber Security Engineer

Every day, millions of shipments move around the world on data that nobody is looking at in real time. Orders, ASNs, invoices, and tracking events flow between 3PLs, forwarders, brands, and retailers, then get flattened into a status that tells you something went wrong only after it already has.

SwiftB2B exists to change that. We are an AI operating system for global supply chains. One platform where 3PLs, freight forwarders, brands, retailers, and manufacturers can see every item, shipment, and exception as it happens. The platform does not stop at flagging a delay. It works out what the delay costs, weighs the options, and starts the fix.

We built it on 15 years of SwiftAnt’s work in supply chain and EDI technology, and on a team that has spent careers in logistics, retail, and enterprise software.

We hold our customers’ order books, their carrier contracts, their pricing, and the EDI connections to their trading partners. A breach would not just embarrass us. It would stop goods moving. We run on Azure and Databricks, we ship AI agents that act on customer data, we are ISO 27001 and ISO 27701 certified and working towards SOC 2. We are looking for the person who operates the security controls day to day: identity, secrets, monitoring, detection, response, and recovery. Not a policy writer. Someone who has run a security incident at 2am and proved a restore from a compromised backup.

What you will do

• Own identity and privileged access across Azure, Databricks, Keycloak, and our SaaS tools. Joiner, mover, leaver executed on time. Access reviewed, unnecessary access removed.
• Run secrets and certificate lifecycle: Key Vault, rotation, EDI partner certificates for AS2 and SFTP, no credentials in code.
• Build and run security monitoring and detection: Microsoft Sentinel or equivalent, Defender for Cloud, alerting that finds material events before a customer reports them.
• Lead the technical response to security incidents: containment, forensics, recovery, and the postmortem that stops it recurring.
• Own backup and recovery, including recovery from malicious compromise, proven by running the restore rather than describing it.
• Put security into the pipeline: SAST, dependency and container scanning, IaC scanning, with findings triaged and closed. Coordinate third-party penetration tests and drive findings to re-test.
• Secure the AI surface: prompt-injection defences, data residency, agent permission boundaries, audit logs for every agent action. Work with the LLMOps engineer on the controls.
• Produce the evidence for ISO 27001 and 27701 readiness. Our quality team verifies it independently; you operate it.
• Secure the EDI and integration estate: partner onboarding, protocol hardening, transfer monitoring.

What we are looking for

• Three or more years in hands-on security engineering or security operations, on a cloud estate you were responsible for.
• Azure security depth: Entra ID, Conditional Access, PIM, Key Vault, Defender, Sentinel, network security. AZ-500 is a strong plus.
• Experience running incident response for real, including at least one incident you would tell us about.
• Backup and disaster recovery you have tested, including a ransomware-style scenario.
• DevSecOps in practice: scanning in CI/CD, IaC with Terraform or Bicep, secrets management.
• Familiarity with ISO 27001 controls and what evidence an auditor actually asks for. SOC 2 experience also useful.
• Scripting in Python or PowerShell for automation and investigation.
• Understanding of LLM and agent security risks (OWASP LLM Top 10) is a strong plus. Security+, CISSP, or CCSP is a plus. Databricks security experience (Unity Catalog, workspace hardening) is a plus.
• A degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Not sure you tick every box?

Apply anyway. Nobody we have hired matched the list line for line. If you have kept a cloud estate safe, caught something before it became a headline, and proved a restore that worked, we want to talk to you. Tell us about one control you put in that nobody thanked you for. That tells us more than a certification list.

Equal opportunity

SwiftB2B hires on talent, skill and curiosity. We do not discriminate on the basis of race, religion, nationality, gender, sexual orientation, age, disability, or any other protected characteristic. If you need an adjustment at any stage of the process, tell us and we will make it happen.