Build the most trusted document platform for SMBs.
merlon is a small, senior team building security software that a company without a security department can actually run. Engineering, research, and security sit in Zürich; commercial and support roles are US-remote or New York. We hire people who care about getting the hard, unglamorous parts right.
Small team, serious problem, real ownership
We're not a hundred-person org where your work disappears into a backlog. The systems you build protect other companies' most sensitive documents — and you'll own them end to end.
"We staff two permanent in-house security teams and run our own follow-the-sun SOC. If you want to do security work that actually ships — and be trusted to make the call — this is a rare place to do it."
merlon is built by a deliberately small, senior group. We keep the team lean so that every engineer has a real surface area, decisions are made in the room, and the distance between "we should" and "it's live" is measured in days, not quarters. What we ask in return is judgement: the discipline to get security, data residency, and compliance right the first time, because our customers can't afford for us to get them wrong.
You'll work across the whole stack of the problem — not just a feature, but the control behind it, the audit trail that proves it, and the documentation a customer's security team will actually read.
Judgement over credentials
We hire experienced people and trust them with real decisions. Titles and pedigree matter less to us than how you think when the answer isn't obvious.
People who thrive here
- Take end-to-end ownership without waiting to be told
- Write clearly and reason in public, so decisions are legible
- Treat security and correctness as part of the definition of done
- Are comfortable across timezones and asynchronous by default
What we're not
- A place that ships fast by skipping the security review
- A hierarchy where good ideas need three sign-offs
- A meeting-heavy culture that mistakes activity for progress
- A large org where your work disappears into a backlog
Two hubs, one team
Roles are anchored to one of our two regions, but the team operates as a single group with shared ownership of the product.
Zürich — Engineering & Security
Our European HQ and the home of R&D and the security teams. On-site and hybrid roles on a Swiss employment contract, near Germaniastrasse.
- Disciplines
- Backend · Frontend · SRE · Blue & Purple Team
- Contract
- Swiss employment
- Model
- Hybrid, office near Germaniastrasse 1
US — Commercial & Customer
Our global HQ operations, with New York and remote-first roles across the Americas covering sales, solutions, and customer success.
- Disciplines
- Sales · Solutions Engineering · Customer Success
- Contract
- US employment (Wahlen Software Inc.)
- Model
- Remote-first · New York option
Culture, in specifics
The same four principles that shape our product shape how we operate as a team.
Security-first, genuinely
"Is this safe?" comes before "is this fast?". Security has a seat at every design review and a veto that gets used.
Swiss precision
We value correctness and predictability over heroics. Well-tested and boring beats clever and fragile, every time.
Deep work, low meeting load
Asynchronous by default across timezones. We protect focus time and keep standing meetings to a minimum.
Transparency inside & out
Decisions are written down. Our controls and sub-processors are public — and so is our reasoning, internally.
Two regions, one team
Zürich and the US operate as a single group. Ownership follows the problem, not the timezone.
Ship, then sharpen
We release in small, reversible steps behind gated deploys — no unverified change reaches production.
What we offer
Practical, region-appropriate benefits — designed to let you do your best work without friction.
Swiss contract or US remote
Zürich roles are on a Swiss employment contract; US roles are remote-first with a New York option.
Hybrid in Zürich
A real office near Germaniastrasse for the days you want to be in the room, and flexibility for the days you don't.
Learning budget
An annual budget for courses, conferences, certifications, and the books that make you better at the craft.
Security-first culture
Work where security is the point, not an afterthought — with two in-house teams to learn alongside.
Equity
Meaningful ownership in the company. When merlon does well, the people who built it do well.
Wellbeing
Generous paid time off, a sane on-call rotation, and a genuine expectation that you take your holiday.
Five steps, about two to three weeks
We keep it short and respectful of your time. No take-home marathons, no surprise rounds. You'll always know where you stand.
Apply
Send us a short note and your CV or profile via the contact form. Tell us what you'd want to own here.
Intro call
A 30-minute conversation with the hiring manager about your experience, the role, and your questions.
Technical
A practical, paid or time-boxed session on a realistic problem — no algorithm trivia, no gotchas.
Meet the team
Meet the people you'd work with day to day, and dig into how we build and make decisions.
Offer
A clear written offer with compensation, equity, and the contracting entity for your region.
Where you could fit
Filter by location or discipline. Don't see an exact match? Tell us what you do — we hire for talent ahead of headcount.
Senior Backend Engineer
Own core services behind vaults and audit — from data model to encryption at rest. You care about correctness, backpressure, and making the right thing the easy thing.
Security Engineer (Blue Team)
Build detection and telemetry for our follow-the-sun SOC. Tune signal over noise, own runbooks, and drive mean-time-to-detect below five minutes.
Offensive Security Engineer (Purple Team)
Run continuous attack simulation and release assurance. Every deploy is gated — you're the reason nothing unverified reaches production.
Frontend Engineer
Craft the workspace where teams handle sensitive documents. Accessible, fast, and clear under pressure — because people use it on their worst day.
Site Reliability Engineer
Keep the 99.9% SLA honest across US and Swiss regions. Own residency-aware infrastructure, observability, and a humane on-call.
Solutions Engineer
Be the technical partner in enterprise deals — security reviews, questionnaires, and residency setup. Translate customer requirements into a working proof of value.
Account Executive
Own the Americas pipeline for regulated SMBs. Consultative, credible on security, and comfortable selling trust rather than features.
Customer Success Manager
Guide enterprise customers from onboarding through renewal — DPAs, SSO, residency, and the quiet reassurance that their auditors will be happy.
A team that spans an ocean and a working day
Soft numbers that describe how we operate. We keep headcount deliberately lean and seniority deliberately high.