Lead, Security Operations

Ladders; United States; Remote; USD 121,000 - 187,000; Full time

Benefits offered by this job

Competitive compensation

Healthcare coverage

401(k) options

Employer-funded retirement

Paid holidays

Disability, life insurance

Tuition reimbursement

Wellness support

Mental health support

Job summary

Ladders is seeking a Lead, Security Operations for a remote role in the Finance & Insurance space. The position focuses on readiness, coordination, and rapid execution during cybersecurity events, with you leading cross‑functional response efforts and guiding investigations to ensure preparation and recovery from complex incidents.

The role also emphasizes strengthening playbooks, escalation paths, and team preparedness through testing and continuous improvement.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information technology, or 7+ years of equivalent experience.
• Experience leading a CSIRT and coordinating responses across teams and partners.
• Strong knowledge of incident investigation and recovery across various environments.

Responsibilities

• Lead the CSIRT and set priorities for incident readiness.
• Direct the full incident response process from triage through post‑incident review.
• Coordinate incident response efforts across internal teams and external partners.

Skills

CSIRT leadership

Incident response

Cross-functional leadership

Tabletop exercises

Education

Bachelor’s degree or equivalent experience

Tools

SIEM

EDR

Job description

For our client, we are seeking a Lead, Security Operations to join the team of a leader in the Finance & Insurance space. This role will oversee the security incident response function, with a strong focus on readiness, coordination, and rapid execution during cybersecurity events. You will lead cross‑functional response efforts, guide investigations, and help ensure the organization is prepared to manage and recover from complex incidents. The position also plays a key role in strengthening playbooks, escalation paths, and team preparedness through testing and continuous improvement. Location: Remote. Compensation: $120,900 – $187,000 annually.

Responsibilities

• Lead the Computer Security Incident Response Team (CSIRT) and set priorities for incident readiness.
• Direct the full incident response process from triage through post‑incident review.
• Coordinate incident response efforts across internal teams and external partners.
• Maintain and enhance incident response plans and escalation procedures.
• Serve as a primary escalation point for significant cybersecurity incidents.
• Guide incident investigations, including evidence preservation and forensic analysis.
• Lead tabletop exercises to test readiness and clarify responsibilities.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or 7+ years of equivalent experience.
• Significant experience in cybersecurity operations and incident response, particularly leading a CSIRT.
• Proven ability to manage complex cybersecurity incidents and coordinate responses across teams and partners.
• Strong technical knowledge in incident investigation and recovery across various environments.
• Experience with security monitoring technologies like SIEM and EDR.
• Familiarity with digital forensics and threat intelligence.
• Relevant certifications such as CISSP or GCIH preferred.

Benefits

• Competitive compensation and total rewards incentives
• Comprehensive healthcare coverage
• Multiple 401(k) savings plan options
• 100% employer‑funded retirement account feature
• Generous paid time off, including 12 paid holidays
• Disability, life, and long‑term care insurance
• Tuition reimbursement and student loan repayment
• Wellness support, including gym membership reimbursement
• Caregiver and mental health support services

Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.