---
title: 'Senior Security Analyst at Lead'
canonical: 'https://feeny.ai/job/senior-security-analyst-lead-new-york-bdq411vkhb3g'
type: 'job'
last_seen: '2026-11-08'
---

# Senior Security Analyst at Lead

- **Company:** Lead
- **Location:** New York, NY
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-27
- **Last confirmed live:** 2026-11-08
- **Apply:** https://jobs.ashbyhq.com/leadbank/45ca8352-4bb7-419e-9407-1756591e69ff

## Job description

## About Lead Bank

Lead is a banking infrastructure platform trusted by the most innovative companies to power complex financial products. We enable fintechs to offer compliant, programmable services like payments, lending, and digital assets at scale. Banking has moved beyond traditional institutions and is now embedded directly into everyday experiences, meaning companies need modern infrastructure that is safe, secure, and operationally sound. Today, Lead is one of the only API-first, developer-focused partner banks with the financial, regulatory, and legal expertise required to help fintechs succeed. We operate offices in San Francisco, Sunnyvale, and New York City, and an FDIC-insured bank in Kansas City.

Information Security Team at Lead The Information Security team helps Lead stay nimble enough to move fast without compromising on safety. They own cybersecurity, overseeing detection and response, and building security controls for all data networks, cloud infrastructures, and IT systems. Working closely with the Risk, Compliance, and Audit teams, they ensure Lead meets and stays up to date on all security standards. Scaling the systems that protect Lead and the fintechs we serve requires critical thinking, good judgment, and an ownership mentality. This is a collaborative team of builders who approach problems creatively, constantly iterating to improve the security of our platform.

## Role Description

Lead Bank is looking for a Senior Security Analyst to join our Security Operations team. You'll be a core contributor to our detection and response capabilities — building detections, triaging alerts, responding to incidents, and proactively hunting threats across cloud infrastructure, security tooling, and data pipelines. You'll mentor junior analysts and partner with leadership to drive our security posture forward. Your expertise will be vital in navigating the complex regulatory landscape of the banking industry and defending against advanced persistent threats.

In this role you will:

- Build, tune, and maintain detection rules and alerts in our SIEM, writing queries to identify threats and coverage gaps aligned to MITRE ATT&CK
- Own incident response execution end-to-end — containment, eradication, recovery, and lessons learned — including forensic log analysis and post-incident reporting
- Monitor and investigate security events across endpoints, cloud (AWS), identity, and network telemetry — identifying misconfigurations, anomalous activity, and suspicious behavior
- Assist with security audits and regulatory examinations, ensuring timely and accurate security documentation and evidence is provided
- Analyze systems, applications, and networks for security configurations in partnership with security engineers.
- Manage log pipelines including ingestion, parsing, normalization, and enrichment to ensure high-fidelity data is available for detection and investigation
- Triage and prioritize vulnerability findings using risk-based frameworks and track remediation SLAs with IT and Engineering
- Collaborate with Engineering on IaC and CI/CD security reviews, and contribute to runbooks and playbooks
- Perform all other duties as assigned

What we are looking for: Required

- 5+ years in information security or security operations
- Hands-on SIEM experience with query writing, detection building, and alert tuning
- Strong working knowledge of cloud security concepts and services (AWS preferred; GCP and Azure also considered)
- Proficiency working with logs across endpoint, cloud, network, identity, and application sources
- Understanding of CI/CD pipelines and IaC (Terraform, CloudFormation) from a security perspective
- Solid grasp of Windows, macOS, and Linux internals — processes, persistence mechanisms, and attacker TTPs
- Demonstrated IR experience, including leading or contributing to investigations
- Familiarity with data normalization, log parsing, and ETL concepts
- Strong written and verbal communication skills

## Preferred

- Experience with log routing, transformation, and enrichment
- Hands-on experience with an enterprise EDR/XDR platform and its ecosystem tooling — SOAR, exposure management, and identity protection
- Experience with network security tools and interpreting proxy or web traffic logs Background in a regulated industry (financial services, healthcare) with familiarity with NIST CSF, GLBA, or FFIEC
- Scripting or automation experience (Python, Bash) for detection engineering, workflow automation, and version-controlled code in GitHub
- Relevant certifications: CISSP, GCIH, GCIA, GCED, CEH, GDSA, or equivalent

## Nice to Have

- Detection as Code experience using version-controlled detection content
- Exposure to identity security tooling

What we offer: At Lead, we design our benefits to support company culture and [principles](https://docs.google.com/document/d/1BpDk5yNqa19IZCp8JbxKUd3ndBLVx44Jcg2DNi2KTeQ/edit), to foster an efficient and inspiring work environment, and to create the conditions for our team to give their best in both work and life

- Competitive compensation based on experience, geographic location, and role
- Medical, Dental, Vision, Life, 401k Matching, and other wellness benefits, including FSA, HSA and HRA
- Paid parental leave
- Flexible vacation policy, including PTO and paid holidays
- A fun and challenging team environment in a dynamic industry with ample opportunities for career growth

*Lead Bank is proud to have an inclusive culture committed to ensuring equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.

*Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

**Our compensation reflects the cost of labor across several US geographic markets. Pay is based on a number of factors and may vary depending on geographical market location, job-related knowledge, skills, and experience. These ranges may be modified in the future.

Zone 1: $142,875 - $170,910 (NYC)

## #LI-AG1

## About Lead

## Company Overview
- **One-liner**: Lead is a state-chartered, FDIC-insured bank that provides programmable financial services and Banking-as-a-Service (BaaS) APIs, enabling fintechs and crypto companies to embed compliant banking products into their own platforms.
- **Entity Type**: Private (Series B)
- **Headquarters**: Sunnyvale, California, USA
- **Founded**: 1928 (original bank), relaunched as a fintech-focused BaaS platform
- **Founders**: Jacqueline Reses (CEO), Erica Khalili (CLO/Risk Officer), and a team of fintech and banking veterans

## Core Business
- **Primary Industry**: Financial Services / Banking-as-a-Service (BaaS)
- **Target Customers**: B2B — specifically Fintech companies, crypto platforms, and other businesses that want to embed financial services (lending, payments, card issuing, deposits) into their own products
- **Mission/Purpose**: “Define what’s possible in banking” by combining regulatory expertise with modern technology to support builders and innovators

## Products & Services
- **Lend (Lending API)**: Originate secured/unsecured term loans and lines of credit, with disbursement via the platform’s rails.
- **Issue (Card Issuing API)**: Issue debit, prepaid, and credit cards through a card-issuing processor; Lead handles settlement, network oversight, and compliance.
- **Move (Payments API)**: Send and receive payments across domestic (ACH, wires), international, and blockchain (stablecoin) rails.
- **Store (Deposit Accounts API)**: Hold customer funds in FDIC-insured, multi-currency deposit accounts with flexible account structures.
- **Partner Platform**: A unified compliance and oversight portal for partners to manage risk, KYC/KYB, and regulatory reporting.

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: Total Funding of **$200M** across 3 rounds:
  - Series B (Oct 2024): **$70M** — led by **Andreessen Horowitz** and **Khosla Ventures**, with participation from 5 other investors
  - Private Equity Round (Aug 2022): **$100M** — 5 investors
  - Debt Financing (Mar 2021): **$30M**
- **Notable Investors/Partners**: Andreessen Horowitz, Khosla Ventures, Chainalysis (compliance partner)
- **Growth Signals**:
  - **265 employees**, up **77.2% YoY** (LinkedIn, mid-2025)
  - Headcount growth fueled by hiring from Pinwheel, Square, Stripe, Loop Crypto, and Block
  - Active job postings: 17 roles (quarterly growth +21.4%)
  - Ranked in *Inc.* America’s Best Startup Employers 2025, *Forbes* Best Places to Work 2025
  - Certified as a “Most Loved Workplace” for 2025
  - Won “BaaS Innovation Award” from American Banker (2022, 2023, 2025)
  - Acquired Loop Crypto in Jan 2024 to strengthen stablecoin capabilities

## Competitive Advantages
- **Bank Charter**: One of only a few de-novo banks built in the last two decades in the US — offers the compliance and regulatory infrastructure of a fully chartered, FDIC-insured bank while operating like a modern fintech.
- **Composability by Design**: Its four product pillars (Lend, Issue, Move, Store) can be used individually or together, allowing partners to assemble custom financial products without being locked into a monolithic stack.
- **Stablecoin Expertise**: With the acquisition of Loop Crypto and dedicated stablecoin leadership, Lead is positioned to help partners move money via blockchain rails compliantly.
- **Founder-Led**: Leadership team has deep fintech and banking experience (including building a de-novo bank previously), reducing the risk of regulatory friction for partners.

## Strategic Focus
- **Deepening Stablecoin & Crypto Capabilities**: Recent Chainalysis collaboration to enhance blockchain compliance. Stablecoin payments are a growing priority.
- **Scaling Platform Adoption**: Opening up APIs (additional endpoints in active development) and documentation (e.g., `llms.txt` for AI-readiness) to attract more developer-friendly partners.
- **Winning BaaS Market Share**: Targeting fintechs and crypto companies that are dissatisfied with legacy BaaS providers (a crowded space that includes Synapse, Treasury Prime, etc.).
- **Talent Growth & Culture**: Rapidly scaling headcount while maintaining recognition as a top workplace — key to attracting engineering and compliance talent.

## Why Work Here
- **Culture**: Certified Most Loved Workplace 2025. Operating principles include “Client Obsession,” “Champion Change & Innovation,” “Embrace Divergent Perspectives,” and “Owner Mentality” — indicating a high-trust, empowered environment.
- **Remote/Hybrid Policy**: The company has 7 offices across the US (Sunnyvale HQ, Kansas City, New York, San Francisco, and others) but job postings (e.g., Software Engineer, Technical Account Manager) do not explicitly state remote vs. in-office — likely hybrid or on-site for many roles.
- **Awards & Recognition**: *Inc.* America’s Best Startup Employers, *Forbes* Best Places to Work, *American Banker* BaaS Innovation Award — strong external validation of workplace quality.
- **Team Composition**: 51 technical employees (8% of workforce), heavily skewed toward specialists (103, 15%) and managers (45, 7%). Departments include Finance (98), Technical (51), Operations (21). Deep bench of talent drawn from Block, Stripe, Square, and Yahoo.
- **Perks**: Not explicitly listed on the careers page, but the culture emphasis on “owner mentality” suggests potential for equity, autonomy, and impact. The company is still in growth phase (Series B, recent 77% headcount growth) — likely means high ownership for new hires.
- **Who Should Apply**: Engineers (especially TypeScript, Python, blockchain), Technical Account Managers, Compliance/Risk specialists, and Product Leaders who want to work at the intersection of banking regulation and modern fintech.

## Sources
1. [lead.bank](https://www.lead.bank/)
2. [LinkedIn – Lead](https://www.linkedin.com/company/lead-bank)
3. [Explore Lead – Lead Bank](https://www.lead.bank/explore-lead)
4. [Most Loved Workplace Certified – Lead Bank Blog](https://www.lead.bank/blog-posts/most-loved-workplace-certified)
5. [Lead API Docs – What is Lead](https://docs.lead.bank/get-started/what-is-lead)

## Other roles at Lead

- [Financial Crimes Intelligence Manager](https://feeny.ai/job/financial-crimes-intelligence-manager-lead-kansas-city-6v1zv5khxwfd) — Kansas City, MO / New York, NY / San Francisco, CA / Sunnyvale, CA / United States
- [Financial Crimes Specialist](https://feeny.ai/job/financial-crimes-specialist-lead-new-york-t5t9af17qn4p) — New York, NY
- [Internal Audit Manager](https://feeny.ai/job/internal-audit-manager-lead-kansas-city-4m57jha8r1zz) — Kansas City, MO / New York, NY / San Francisco, CA / Sunnyvale, CA / United States
- [Senior Loan Operations Support](https://feeny.ai/job/senior-loan-operations-support-lead-kansas-city-rwqekak63x28) — Kansas City, MO / Lee's Summit, MO / Blue Springs, MO
- [ACH Processor](https://feeny.ai/job/ach-processor-lead-kansas-city-ef6y6tebswhe) — Kansas City, MO
- [Associate Program Manager](https://feeny.ai/job/associate-program-manager-lead-kansas-city-ex1gwbzwphmg) — Kansas City, MO / New York, NY / San Francisco, CA / Sunnyvale, CA / United States
- [Teller](https://feeny.ai/job/teller-lead-lee-s-summit-8vj9vy64f4yb) — Lee's Summit, MO / Blue Springs, MO
- [Risk Reporting & Innovation Manager](https://feeny.ai/job/risk-reporting-innovation-manager-lead-kansas-city-wz574czyh553) — Kansas City, MO / New York, NY / San Francisco, CA / Sunnyvale, CA / United States
- [Product Leader](https://feeny.ai/job/product-leader-lead-kansas-city-0fca9b5k6vwh) — Kansas City, MO / New York, NY / San Francisco, CA / Sunnyvale, CA / United States
- [Part-Time Teller](https://feeny.ai/job/part-time-teller-lead-lee-s-summit-nbcpp3rfwhh0) — Lee's Summit, MO / Blue Springs, MO