Security Engineer Lead

Overview

At Lendistry, we’re more than just a fintech company—we’re a mission-driven team changing the game for small business owners and the communities they serve. As a national employer and recipient of 2025's Best Places to Work in Fintech, we believe in creating opportunity, driving equity, and delivering impact where it matters most. We’re looking for strategic thinkers and passionate doers—people who show up every day ready to make a real difference.

If you’re driven by purpose and thrive in a culture of innovation and service, Lendistry might just be the place for you.

A Day in the Life The Security Engineer Lead is a senior, hands-on technical leader responsible for designing, executing, and continuously maturing the enterprise vulnerability management and security risk program across IT, cloud, and third-party environments. This role partners closely with Infrastructure, Cloud Engineering, Application Engineering, GRC, Legal, and Executive Leadership to ensure security risks are identified early, measured accurately, and reduced effectively without slowing business velocity.

This role is accountable for vulnerability identification, prioritization, remediation governance, risk acceptance, executive reporting, and operational security support. The Security Engineer Lead is comfortable operating both strategically and tactically, leading cross-functional remediation efforts, responding to incidents, and communicating risk clearly to technical and non-technical stakeholders. Some travel required.

• Own and lead the end-to-end vulnerability management program across corporate IT, cloud (AWS/Azure), and supporting infrastructure
• Define vulnerability intake, prioritization, remediation SLAs, escalation paths, and risk acceptance processes
• Drive remediation accountability with engineering and IT teams while balancing business impact and risk
• Manage vulnerability exception and risk waiver processes, including documentation, approvals, and periodic reviews
• Operate and optimize vulnerability scanning tools across infrastructure, cloud, and endpoints
• Leverage SIEM and EDR platforms to support vulnerability correlation, threat detection, and incident response
• Partner with SOC and MSSP providers to support monitoring and response activities
• Participate in security incident response activities, including investigation, containment, remediation, and post-incident reviews
• Conduct vendor security assessments and manage third-party security risk
• Support SOC 2, ISO 27001, and other regulatory compliance and audit activities
• Develop and maintain security dashboards, KPIs, and executive risk reporting

• 7+ years of experience in cybersecurity engineering or security operations with demonstrated leadership
• Proven experience leading an enterprise vulnerability management program
• Hands-on experience with vulnerability scanners, SIEM, EDR, and cloud platforms (AWS/Azure)
• Experience conducting vendor security assessments using recognized frameworks
• Direct involvement in incident response and operational security workflows
• Working knowledge of SOC 2 and ISO 27001 frameworks
• Experience producing executive-level security and risk reporting

• Comprehensive Medical, Dental, and Vision Insurance
• Generous Paid Time Off
• Birthday Day Off
• 12 Paid Company Holidays
• 401(k) Match
• FSA and HSA
• Paid Life Insurance
• Paid Disability Insurance
• Pet Insurance
• Employee Assistance Program (EAP)
• Professional Development Courses
• In Office Provided Snacks and Drinks
• Gym Facilities (LA & Tustin/CEC Offices)
• In Office Engagement Activities

The US base salary range for this full-time position is $111,400–$128,400 annually. Our salary ranges are determined by role, level, and location.

The range displayed on each job posting reflects the minimum and maximum base salary for new hires for the position across all US locations. Within the range, individual pay is determined by multiple factors like job-related skills, experience, and state of residence. Your recruiter can share more about the specific salary range during the interview process.

Please note that the compensation…