Lead Security Engineer

Prelim

. Own the Secure SDLC, including dependency scanning, static analysis, security reviews of high-risk changes, and coordination of annual penetration tests .

Posted 9/16/2026full-timeRemote • United StatesSenior💰 $240,000 - $260,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Secure SDLC practices, including dependency scanning, static analysis, and security reviews, while effectively managing SOC 2 Type II audits and incident response. Proficient in risk assessments, security program development, and collaboration with DevOps on security controls.

Highest-signal resume keywords

Security EngineeringSOC 2 Audit ManagementIncident Response PlanningCloud Security ConfigurationDetection Engineering / SIEM

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure SDLCDependency ScanningStatic AnalysisRisk AssessmentIncident ResponseCode ReadingScriptingCloud Controls ConfigurationSecurity ReviewsPhishing Resistance

Soft Skills

Strong Written CommunicationJudgment About Proportionality

Tools & Technologies

IAMSecrets ManagementNetwork ArchitectureLoggingDetection ToolsSOC 2 Type IIISO 27001

Industry Keywords

FintechBanking-Vendor ExperienceFFIECGLBAThird-Party Risk ManagementCore Banking IntegrationsPIIKYC Data Flows

Tech Stack

Tools & technologies

CloudSDLC

About the role

Key responsibilities & impact

Own the Secure SDLC, including dependency scanning, static analysis, security reviews of high-risk changes, and coordination of annual penetration tests
Teach engineers to identify security issues earlier
Partner with DevOps on IAM, secrets management, network architecture, logging, and detection
Define policies, conduct risk assessments, and create the security roadmap
Own security questionnaires, vendor risk assessments, and customer security reviews
Manage endpoint security, access reviews, phishing resistance, and offboarding hygiene
Own SOC 2 Type II end to end, including control design, evidence collection, and auditor management
Own incident response by writing the plan, running tabletops, and leading real incidents
Help define Prelim's security program as its first dedicated security hire

Requirements

What you’ll need

5+ years in security engineering, with breadth across appsec, cloud security, and compliance
Hands-on ability to read code, write scripts, and configure cloud controls
Owned or heavily contributed to a SOC 2 audit, or ISO 27001 / equivalent
Experience answering enterprise or financial-institution security reviews
Strong written communication
Judgment about proportionality and appropriate security controls
Fintech or banking-vendor experience preferred; familiarity with FFIEC, GLBA, or bank third-party risk management preferred
Experience as a first or early security hire preferred
Detection engineering / SIEM experience preferred
Familiarity with core banking integrations or PII/KYC data flows preferred

Benefits

Comp & perks

Equity
Sponsored 401K
Parental leave
Fully paid health, vision, and dental insurance
Unlimited PTO
Remote work stipend
Life-style stipend
Twice-yearly company retreats