Lead Security Engineer

Ladders; United States; Remote; USD 125,000 - 150,000; Full time

Benefits offered by this job

Equity options

Sponsored 401(k) retirement plan

Parental leave policy

Fully paid health, vision, and dental

Unlimited PTO

Remote work stipend

Company retreats

Job summary

Ladders, a leader in Enterprise Technology, seeks a Lead Security Engineer to own core security initiatives that protect systems, support audit readiness, and strengthen operational resilience. The role balances hands‑on technical work with policy development and cross‑functional influence in a fast‑moving environment.

This remote US‑based position partners with DevOps and compliance to translate security risk into practical controls and clear decisions.

Qualifications

• 5+ years in security engineering, covering appsec, cloud security, and compliance.
• Strong coding skills with the ability to read and write scripts and configure cloud controls independently.
• Experience leading or significantly contributing to SOC 2 or ISO 27001 audits.
• Proven track record responding to enterprise-level security reviews, especially in financial services.
• Excellent written communication skills to convey complex security issues clearly.
• Ability to assess risk proportionality relevant to the company’s scale.

Responsibilities

• Lead the Secure SDLC process, including dependency scanning and coordinating penetration tests
• Collaborate with DevOps to enhance IAM and network security
• Develop and maintain security policies and risk assessments, justified to stakeholders
• Manage security questionnaires and vendor risk assessments for third‑party compliance
• Oversee endpoint management and security hygiene practices
• Direct the SOC 2 Type II process from design to auditor interaction
• Establish and lead incident response planning and simulations

Skills

Security engineering

AppSec

Cloud security

Compliance

SOC 2 audits

ISO 27001 audits

Job description

For our client, we are seeking a Lead Security Engineer to join the team of a leader in the Enterprise Technology space.

This role will own core security engineering initiatives that protect the company’s systems, support audit readiness, and strengthen operational resilience. The position partners closely with DevOps, compliance, and business stakeholders to translate security risk into practical controls and clear decision-making. It is well suited for someone who can balance hands‑on technical execution with policy development and cross‑functional influence in a fast‑moving environment.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $125,000 – $150,000 annually

Responsibilities

• Lead the Secure SDLC process, including dependency scanning and coordinating penetration tests
• Collaborate with DevOps to enhance IAM and network security
• Develop and maintain security policies and risk assessments, justified to stakeholders
• Manage security questionnaires and vendor risk assessments for third‑party compliance
• Oversee endpoint management and security hygiene practices
• Direct the SOC 2 Type II process from design to auditor interaction
• Establish and lead incident response planning and simulations

Qualifications

• 5+ years in security engineering, covering appsec, cloud security, and compliance
• Strong coding skills, with the ability to read and write scripts and configure cloud controls independently
• Experience leading or significantly contributing to SOC 2 or ISO 27001 audits
• Proven track record responding to enterprise‑level security reviews, especially in financial services
• Excellent written communication skills to convey complex security issues clearly
• Ability to assess risk proportionality relevant to the company’s scale

Benefits

• Equity options in the company
• Sponsored 401(k) retirement plan
• Parental leave policy
• Fully paid health, vision, and dental insurance
• Unlimited paid time off (PTO)
• Remote work and lifestyle stipends
• Twice‑yearly company retreats