Lead Security Engineer
Core
Define and execute the security program for a digital account-opening infrastructure platform serving community banks and credit unions.
Role type
Lead Security Engineer (first dedicated hire)
Builds
Secure SDLC practices, IAM, secrets management, network architecture, logging, detection, and SOC 2 Type II compliance.
Domain
Fintech / Banking Infrastructure
Required skills
Security engineering, AppSec, Cloud security, Compliance, SOC 2 audit ownership, Incident response, Penetration test coordination, IAM, Secrets management, Risk assessment, Vendor risk assessment, Endpoint management, Phishing resistance, Scripting, Code review
Preferred skills
Fintech or banking-vendor experience, FFIEC/GLBA knowledge, Detection engineering, SIEM, Core banking integrations, PII/KYC data flows
Technologies
Cloud controls, SIEM, IAM tools, Endpoint management tools
Responsibilities
Secure SDLC implementation, Partner with DevOps on security controls, Define security policies and roadmap, Manage vendor risk assessments, Own SOC 2 Type II end-to-end, Lead incident response and tabletop exercises
Seniority
Senior, hands-on IC