Lead Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of the Secure SDLC, which includes dependency scanning, static analysis, security evaluations of high-risk modifications, and the coordination of annual penetration testing.

• Educate engineers on identifying security vulnerabilities at an early stage.

• Collaborate with DevOps on IAM, secrets management, network architecture, logging, and detection strategies.

• Establish policies, perform risk assessments, and develop the security roadmap.

• Manage security questionnaires, vendor risk assessments, and customer security evaluations.

• Oversee endpoint security, access reviews, phishing resistance measures, and offboarding procedures.

• Manage the entire SOC 2 Type II process, including control design, evidence gathering, and auditor coordination.

• Lead incident response by crafting the plan, facilitating tabletop exercises, and directing real incidents.

• Contribute to defining Prelim's security program as its inaugural dedicated security hire.

⛳️ Requirements

• 5+ years of experience in security engineering, covering areas such as application security, cloud security, and compliance.

• Practical skills in reading code, writing scripts, and configuring cloud security controls.

• Have led or significantly contributed to a SOC 2 audit, or possess ISO 27001 or equivalent experience.

• Familiarity with responding to security reviews for enterprises or financial institutions.

• Excellent written communication skills.

• Good judgment regarding proportionality and suitable security measures.

• Experience in fintech or with banking vendors is preferred; knowledge of FFIEC, GLBA, or third-party risk management in banking is a plus.

• Previous experience as a first or early security hire is advantageous.

• Experience in detection engineering or with SIEM systems is preferred.

• Knowledge of core banking integrations or PII/KYC data processes is preferred.

🏝️ Benefits

• Equity

• Sponsored 401K

• Parental leave

• Fully covered health, vision, and dental insurance

• Unlimited PTO

• Remote work stipend

• Lifestyle stipend

• Biannual company retreats