Intermediate Security Analyst, Vulnerability Operations (North America)

Ladders; United States; Remote; USD 115,000 - 150,000; Full time

Benefits offered by this job

Comprehensive health and wellness

Flexible PTO

Access to ERGs

Equity compensation and ESPP

Growth and development fund

Parental leave

Job summary

Ladders is seeking an Intermediate Security Analyst, Vulnerability Operations (North America) to triage and validate vulnerability reports and strengthen response quality. You will collaborate with security engineering to reproduce issues, assess severity, and communicate findings with researchers in a remote US-based role.

This position focuses on improving the vulnerability response workflow and requires 0-2 years in cybersecurity, with familiarity in CVE/OWASP and strong communication skills.

Qualifications

• 0-2 years of cybersecurity or related field.
• Understanding of software vulnerabilities and security concepts.
• Familiar with CVE, CVSS, and OWASP terminology.

Responsibilities

• Triage and validate incoming security reports and vulnerabilities.
• Collaborate with security engineering partners to clarify details and reproduce issues.
• Assess severity of vulnerabilities using established frameworks.
• Communicate with researchers regarding disclosures.
• Prepare and maintain CVE-related documentation and communication.
• Monitor metrics to improve response quality.
• Create documentation to streamline vulnerability handling processes.

Skills

Vulnerability triage

CVSS knowledge

OWASP familiarity

Bug bounty experience

Data analysis

Clear communication

Detail-oriented

Education

Cybersecurity education

Job description

For our client, we are seeking a Intermediate Security Analyst, Vulnerability Operations (North America) to join the team of a leader in the Information Technology space.

This role will focus on triaging and validating incoming vulnerability reports, helping ensure security issues are accurately assessed and handled with consistency. The analyst will work closely with security engineering partners to reproduce issues, clarify technical details, and support timely communication with external researchers. This is a highly collaborative position that helps strengthen the organization’s vulnerability response process and improve operational quality across North America.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $115,000 - $150,000 annually

Responsibilities

• Triage and validate incoming security reports and vulnerabilities
• Collaborate with security engineering partners to clarify technical details and reproduce issues
• Assess severity of vulnerabilities using established frameworks
• Communicate with researchers regarding vulnerability disclosures
• Prepare and maintain CVE-related documentation and communication
• Monitor operational metrics to improve response quality
• Create documentation to streamline vulnerability handling processes

Qualifications

• 0-2 years of experience or relevant education in cybersecurity or a related field
• Understanding of software vulnerabilities and security concepts
• Familiarity with security terminology, including CVE, CVSS, and OWASP
• Detail-oriented with strong organizational skills
• Clear communicator for both technical and non-technical audiences
• Experience with bug bounty or vulnerability disclosure platforms
• Basic scripting or data analysis experience is a plus

Benefits

• Comprehensive health and wellness benefits
• Flexible Paid Time Off policy
• Access to Team Member Resource Groups
• Equity compensation and an employee stock purchase plan
• Growth and development fund
• Parental leave

Our client is an equal opportunity employer. We encourage you to apply even if you don't meet every qualification-your background could be exactly what this team needs.