Sr. Engineer, Product Cyber Security

Ladders; United States; Remote; USD 118,000 - 189,000; Full time

Benefits offered by this job

Remote work within US

Pacific time overlap

Total Rewards program

Professional development support

Job summary

Ladders is seeking a Sr. Engineer, Product Cyber Security to strengthen product security across the software development lifecycle for healthcare solutions. You will partner with product, engineering and security teams to assess risk, shape controls, and support secure product releases.

The role emphasizes preparing security evidence for customers, audits, and regulatory submissions while coordinating security testing and SBOM integration. Remote within the US on a sponsor-free basis.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or related field, or equivalent experience.
• 10+ years in software engineering, product/application security, or cybersecurity engineering with hands-on experience.
• Basic fluency in software engineering, including coding, command line, build systems, and CI/CD pipelines.
• Experience with threat modeling, vulnerability assessment, CVSS scoring, and risk acceptance workflows.
• Familiarity with static analysis, software composition analysis tools, and SBOM formats.
• Proven ability to produce formal security deliverables for audits or regulatory submissions.
• Strong written communication skills for technical documentation.

Responsibilities

• Own the cybersecurity plan and deliverables for assigned products, ensuring compliance with internal procedures.
• Produce security documentation including threat models, risk assessments, and vendor assessments.
• Lead threat modeling sessions and document risk findings with product teams.
• Run static code and software composition analysis, triaging findings with engineering.
• Generate and validate SBOMs, integrating them into build pipelines for monitoring.
• Coordinate penetration tests, define scope, and evaluate results with the security team.
• Assemble cyber assurance packages for customers and prepare regulatory submission content.

Skills

Software engineering

Threat modeling

Vulnerability assessment

CVSS scoring

Risk acceptance

Written communication

Education

Bachelor's degree

Tools

Static analysis tools

Software Composition Analysis tools

SBOM formats

Job description

For our client, we are seeking a Sr. Engineer, Product Cyber Security to join the team of a leader in the Healthcare space.
This role will focus on strengthening product security across the software development lifecycle for healthcare solutions. You will partner closely with product, engineering, and security teams to assess risk, shape controls, and support secure product releases. The position also plays an important role in preparing security evidence for customers, audits, and regulatory submissions.
Location: Remote - US based candidates only, no visa sponsorship available
Compensation: $117,800 – $188,600 annually

Responsibilities

• Own the cybersecurity plan and deliverables for assigned products, ensuring compliance with internal procedures
• Produce security documentation including threat models, risk assessments, and vendor assessments
• Lead threat modeling sessions and document risk findings with product teams
• Run static code and software composition analysis, triaging findings with engineering
• Generate and validate SBOMs, integrating them into build pipelines for monitoring
• Coordinate penetration tests, define scope, and evaluate results with the security team
• Assemble cyber assurance packages for customers and prepare regulatory submission content

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or related field, or equivalent experience
• 10+ years in software engineering, product/application security, or cybersecurity engineering with hands-on experience
• Basic fluency in software engineering, including coding, command line, build systems, and CI/CD pipelines
• Experience with threat modeling, vulnerability assessment, CVSS scoring, and risk acceptance workflows
• Familiarity with static analysis, software composition analysis tools, and SBOM formats
• Proven ability to produce formal security deliverables for audits or regulatory submissions
• Strong written communication skills for technical documentation

Benefits

• Remote work opportunity within the United States
• Regular overlap with Pacific time working hours
• Comprehensive Total Rewards program including recognition opportunities
• Support for professional development and career growth

Our client is an equal opportunity employer.