At Prelim, we are on a mission to revolutionize the way financial institutions onboard new customers. We believe that the customer onboarding process should be fast, efficient, and user-friendly. As a member of our team, you will have the opportunity to work with cutting-edge technology and make a real impact on the financial industry.

Our no-code platform allows banks and financial institutions to digitalize their services, streamline account opening processes, and improve customer experience. By joining our team, you will be a part of a fast-paced, innovative, and dynamic work environment where you can learn and grow your skills.

Our team is made up of a diverse group of individuals with a wide range of experience and expertise. We value collaboration, creativity, and a passion for problem-solving. As a member of our team, you will have the opportunity to work with experts in the field, and be challenged to think outside the box.

In addition, we offer a comprehensive benefits package, flexible working hours, and a great work-life balance. We are constantly evolving and growing, and we are looking for talented individuals who share our vision and are excited to be a part of our journey. If you're passionate about fintech and want to be a part of a team that is making a real impact in the industry, then Prelim is the place for you.

Build the security foundation for the future of financial institution

The Prelim team is seeking an Application Security Engineer to join our rapidly growing fully remote US team. As our first dedicated security hire, you'll have the opportunity to architect and build security systems that protect financial institutions' access for millions of people. If you're passionate about solving complex security challenges and eager to lead security at a fast-paced remote startup, we encourage you to apply to join our team today!

As an Application Security Engineer at Prelim, you will own the security of the platform that powers digital account opening for financial institutions across the world. You'll work directly with our engineering team, financial institutions customers, and compliance stakeholders to design and implement cutting-edge security solutions that protect sensitive financial data while meeting the complex regulatory requirements of the financial institutions industry.

This isn't just another security role, it's the chance to build something that millions of people will depend on.

Key Responsibilities:

• Architect and implement security controls across our entire stack, from React frontend to Node.js APIs to PostgreSQL databases.
• Hunt for and remediate complex vulnerabilities including authentication bypasses, race conditions, session fixation, and CSRF attacks.
• Build sophisticated authentication, authorization, and session management systems for high-stakes financial institutions applications.
• Design security monitoring, automated threat detection, and incident response systems from the ground up.
• Navigate and implement compliance requirements for PCI DSS, SOX, GDPR, and SOC 2 in a practical, engineering-focused way.
• Lead security code reviews and establish security practices that scale with our growing engineering team.
• Own security architecture decisions that will shape how millions of users safely access financial institutions services.

Qualifications:

• 2-5 years in application security, security engineering, or software development with strong security focus.
• Deep understanding of web application security including OWASP Top 10, authentication systems, session management, and common vulnerability classes.
• Experience with security testing tools (SAST, DAST, dependency scanning) and the ability to build custom security tooling when needed.
• Knowledge of secure coding practices, security architecture, and threat modeling.
• Familiarity with cloud security (AWS preferred) and infrastructure security concepts.
• Understanding of compliance frameworks (PCI DSS, SOC 2) or willingness to become an expert quickly.
• You approach security problems systematically, understanding both the technical details and business context. You can identify complex vulnerabilities, assess risk, and architect comprehensive solutions.
• You balance security with business impact, focusing on practical solutions that reduce real-world risk while enabling the business to move fast.
• You think deeply about how security vulnerabilities could impact real people's financial lives and take responsibility for protecting sensitive data and user trust.
• You communicate complex security concepts clearly to both technical and non-technical stakeholders, building consensus around security decisions.
• You're excited about mentoring other engineers and building security culture across the entire organization.

About Prelim:

Prelim is a cutting-edge software provider that specializes in customer onboarding for financial institutions. Our platform processes millions of account opening requests while maintaining financial institution grade security standards, and we're just getting started.

We're a profitable company growing 2x year-over-year, which means early employees receive meaningful equity grants with minimal dilution. You'll have real ownership in building the future of financial institution infrastructure.

As our first dedicated security hire, you'll have the rare opportunity to build security architecture from the foundation up. You'll work with some of the biggest names in financial institutions while having an outsized impact on protecting sensitive financial data for millions of users.

Our small, brilliant team moves fast and takes ownership. You'll have direct access to leadership, immediate impact on product decisions, and the opportunity to grow into leading Prelim's security team as we scale.

We offer a fast-paced remote environment where your security expertise will directly shape the future of financial institutions. If you're excited to own security at a company that's transforming how people access financial services, we want to hear from you.

#LI-Remote

We primarily use React, Node.js, and Postgres.