Lead Security Engineer at Prelim in Remote | US

Job description

• Application
• About Prelim
• Prelim builds digital account-opening infrastructure for community banks and credit unions. We've sustained over 100% ARR growth for four consecutive years on seed funding, and our platform sits in the critical path of how banks onboard their customers. When our system is down, a bank can't open accounts for its customers.
• We're a small team. You'd be our first dedicated security hire and help define the security program for the next generation of banking.

Responsibilities

• Secure SDLC: dependency scanning, static analysis, security review of high-risk changes, and coordinating annual penetration tests. Teach engineers to catch issues before you have to.
• Partner with DevOps on IAM, secrets management, network architecture, logging, and detection.
• Policies, risk assessment, and roadmap. Decide what a company our size and risk profile actually needs, and defend that reasoning to auditors, bankers, and internally.
• Own security questionnaires, vendor risk assessments, and customer security reviews. Banks conduct rigorous third-party risk management (often against FFIEC guidance).
• Endpoint management, access reviews, phishing resistance, offboarding hygiene. The unglamorous stuff that questionnaires ask about first.
• Own SOC 2 Type II end to end: control design, evidence collection, auditor management.
• Owning incident responsne, from writing the plan, run the tabletops, and lead if it's ever real. Banks have breach-notification expectations in their contracts. You'll know them cold.

Requirements

• What we're looking for
• 5+ years in security engineering, with breadth across appsec, cloud security, and compliance.
• Hands-on: you can read code, write scripts, and configure cloud controls yourself
• You've owned or heavily contributed to a SOC 2 audit (or ISO 27001 / equivalent)
• Experience answering enterprise or financial-institution security reviews.
• Strong written communication.
• Judgment about proportionality: you know which risks matter at our scale and which controls are theater
• Fintech or banking-vendor experience; familiarity with FFIEC, GLBA, or bank third-party risk management
• Experience as a first or early security hire
• Detection engineering / SIEM experience
• Familiarity with core banking integrations or handling of PII/KYC data flows

Skills

Required

• Security engineering
• Appsec
• Cloud security
• Compliance
• Code reading
• Scripting
• Cloud controls configuration
• SOC 2 audit
• ISO 27001
• Security reviews
• Written communication
• Judgment about proportionality

Preferred

• Fintech or banking-vendor experience
• FFIEC
• GLBA
• Bank third-party risk management
• First or early security hire experience
• Detection engineering
• SIEM
• Core banking integrations

Benefits

• We offer equity, a sponsored 401K, parental leave, and fully paid health, vision, and dental insurance. Additional benefits include unlimited PTO, a remote work stipend, a life-style stipend, and twice-yearly company retreats.