Remote Lead Security Engineer - SOC 2 & Secure SDLC

Ladders; United States; Remote; USD 125,000 - 150,000; Full time

Benefits offered by this job

Equity options

Sponsored 401(k) retirement plan

Parental leave policy

Fully paid health, vision, and dental

Unlimited PTO

Remote work stipend

Company retreats

Job summary

Ladders, a leader in Enterprise Technology, seeks a Lead Security Engineer to own core security initiatives that protect systems, support audit readiness, and strengthen operational resilience. The role balances hands‑on technical work with policy development and cross‑functional influence in a fast‑moving environment.

This remote US‑based position partners with DevOps and compliance to translate security risk into practical controls and clear decisions.

Qualifications

• 5+ years in security engineering, covering appsec, cloud security, and compliance.
• Strong coding skills with the ability to read and write scripts and configure cloud controls independently.
• Experience leading or significantly contributing to SOC 2 or ISO 27001 audits.
• Proven track record responding to enterprise-level security reviews, especially in financial services.
• Excellent written communication skills to convey complex security issues clearly.
• Ability to assess risk proportionality relevant to the company’s scale.

Responsibilities

• Lead the Secure SDLC process, including dependency scanning and coordinating penetration tests
• Collaborate with DevOps to enhance IAM and network security
• Develop and maintain security policies and risk assessments, justified to stakeholders
• Manage security questionnaires and vendor risk assessments for third‑party compliance
• Oversee endpoint management and security hygiene practices
• Direct the SOC 2 Type II process from design to auditor interaction
• Establish and lead incident response planning and simulations

Skills

Security engineering

AppSec

Cloud security

Compliance

SOC 2 audits

ISO 27001 audits

Job description

Ladders, a leader in Enterprise Technology, seeks a Lead Security Engineer to own core security initiatives that protect systems, support audit readiness, and strengthen operational resilience. The role balances hands‑on technical work with policy development and cross‑functional influence in a fast‑moving environment.

This remote US‑based position partners with DevOps and compliance to translate security risk into practical controls and clear decisions.