Security Practices Director

Ladders; United States; Remote; USD 171,000 - 273,000; Full time

Benefits offered by this job

Comprehensive support for work-life-b平

Job summary

Ladders is seeking a Security Practices Director to lead technical security engagements for enterprise customers, strengthening application security across complex SaaS environments. You will translate findings into practical remediation plans and partner with account teams on pre-sales and executive presentations.

This remote role targets US-based candidates and offers a senior leadership track, with a focus on secure SaaS implementations and operational security guidance.

Qualifications

• 7–12+ years of hands-on AppSec experience, including secure SDLC and vulnerability management.
• Threat modeling and pen testing expertise.
• Deep knowledge of OWASP Top 10 and app-layer vulnerabilities.
• Experience securing SaaS platforms with IAM and API security.

Responsibilities

• Lead and validate technical security engagements for enterprise customers using AppSec expertise.
• Identify and advise on common application vulnerabilities.
• Guide customers on secure SaaS implementation and operational security.
• Translate AppSec findings into risk-based remediation roadmaps.
• Oversee end-to-end delivery of security engagements, including scoping and risk ownership.
• Collaborate with account teams on pre-sales activities and executive presentations.
• Act as a trusted advisor to senior security stakeholders.

Skills

AppSec

Vulnerability management

Threat modeling

Penetration testing

OWASP Top 10

IAM security

API security

Executive communication

CISSP

OSCP

Job description

For our client, we are seeking a Security Practices Director to join the team of a leader in the Enterprise Technology space. This role will lead technical security engagements that help enterprise customers strengthen application security across complex SaaS environments. You will serve as a trusted advisor to senior security stakeholders, translating technical findings into practical, risk-based remediation plans. The position also partners closely with account teams on pre-sales efforts and executive presentations while helping shape secure implementation and operational security guidance.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $171,200 - $273,000 annually

Responsibilities

• Lead and validate technical security engagements for enterprise customers using AppSec expertise
• Identify and advise on common application vulnerabilities
• Guide customers on secure SaaS implementation and operational security
• Translate AppSec findings into risk-based remediation roadmaps
• Oversee end-to-end delivery of security engagements, including scoping and risk ownership
• Collaborate with account teams on pre-sales activities and executive presentations
• Act as a trusted advisor to senior security stakeholders

Qualifications

• 7-12+ years of hands-on AppSec experience, including secure SDLC, vulnerability management, threat modeling, and pen testing
• Deep knowledge of the OWASP Top 10 and application-layer vulnerabilities
• Practical understanding of securing SaaS platforms, including IAM and API security
• Strong executive communication skills for CISO/CTO-level interactions
• Preferred security certifications such as CISSP, OSCP, or equivalent

Benefits

• Comprehensive support for work-life balance
• Resources to enhance personal and professional growth
• Access to AI tools to boost productivity
• Opportunities to shape the future of technology and customer experiences

Our client is an equal opportunity employer. We encourage you to apply even if you don't meet every qualification - your background could be exactly what this team needs.