Application Security Engineer

Prelim; San Francisco (CA); Remote; USD 120,000 - 150,000; Full time

Job summary

A leading company specializing in customer onboarding for financial institutions seeks an Application Security Engineer to establish security architecture from the ground up. As the first dedicated security hire, you will directly shape security practices, protecting sensitive financial data while navigating complex regulatory requirements. Join a fast-paced remote team and have a meaningful impact on how millions access financial services.

Qualifications

• Deep understanding of OWASP Top 10 and common vulnerability classes.
• Experience with SAST, DAST, and building custom security tools.
• Ability to communicate complex security concepts to all stakeholders.

Responsibilities

• Architect and implement security controls across the entire stack.
• Hunt for and remediate vulnerabilities including session fixation.
• Design security monitoring and incident response systems.

Skills

Web Application Security

Authentication Systems

Vulnerability Assessment

Risk Assessment

Compliance Knowledge

Education

2-5 years in application security or software development

Tools

Security Testing Tools

Compliance Frameworks

Job description

Build the security foundation for the future of financial institution

The Prelim team is seeking an Application Security Engineer to join our rapidly growing fully remote US team. As our first dedicated security hire, you'll have the opportunity to architect and build security systems that protect financial institutions' access for millions of people. If you're passionate about solving complex security challenges and eager to lead security at a fast-paced remote startup, we encourage you to apply to join our team today!

As an Application Security Engineer at Prelim, you will own the security of the platform that powers digital account opening for financial institutions across the world. You'll work directly with our engineering team, financial institutions customers, and compliance stakeholders to design and implement cutting-edge security solutions that protect sensitive financial data while meeting the complex regulatory requirements of the financial institutions industry.

This isn't just another security role, it's the chance to build something that millions of people will depend on.

Key Responsibilities:

• Architect and implement security controls across our entire stack, from React frontend to Node.js APIs to PostgreSQL databases.
• Hunt for and remediate complex vulnerabilities including authentication bypasses, race conditions, session fixation, and CSRF attacks.
• Build sophisticated authentication, authorization, and session management systems for high-stakes financial institutions applications.
• Design security monitoring, automated threat detection, and incident response systems from the ground up.
• Navigate and implement compliance requirements for PCI DSS, SOX, GDPR, and SOC 2 in a practical, engineering-focused way.
• Lead security code reviews and establish security practices that scale with our growing engineering team.
• Own security architecture decisions that will shape how millions of users safely access financial institutions services.

Qualifications:

• 2-5 years in application security, security engineering, or software development with strong security focus.
• Deep understanding of web application security including OWASP Top 10, authentication systems, session management, and common vulnerability classes.
• Experience with security testing tools (SAST, DAST, dependency scanning) and the ability to build custom security tooling when needed.
• Knowledge of secure coding practices, security architecture, and threat modeling.
• Familiarity with cloud security (AWS preferred) and infrastructure security concepts.
• Understanding of compliance frameworks (PCI DSS, SOC 2) or willingness to become an expert quickly.
• You approach security problems systematically, understanding both the technical details and business context. You can identify complex vulnerabilities, assess risk, and architect comprehensive solutions.
• You balance security with business impact, focusing on practical solutions that reduce real-world risk while enabling the business to move fast.
• You think deeply about how security vulnerabilities could impact real people's financial lives and take responsibility for protecting sensitive data and user trust.
• You communicate complex security concepts clearly to both technical and non-technical stakeholders, building consensus around security decisions.
• You're excited about mentoring other engineers and building security culture across the entire organization.

$120,000 - $150,000 a year

+ meaningful equity

About Prelim:

Prelim is a cutting-edge software provider that specializes in customer onboarding for financial institutions. Our platform processes millions of account opening requests while maintaining financial institution grade security standards, and we're just getting started.

We're a profitable company growing 2x year-over-year, which means early employees receive meaningful equity grants with minimal dilution. You'll have real ownership in building the future of financial institution infrastructure.

As our first dedicated security hire, you'll have the rare opportunity to build security architecture from the foundation up. You'll work with some of the biggest names in financial institutions while having an outsized impact on protecting sensitive financial data for millions of users.

Our small, brilliant team moves fast and takes ownership. You'll have direct access to leadership, immediate impact on product decisions, and the opportunity to grow into leading Prelim's security team as we scale.

We offer a fast-paced remote environment where your security expertise will directly shape the future of financial institutions. If you're excited to own security at a company that's transforming how people access financial services, we want to hear from you.

#LI-Remote