Senior Security Engineer

About Ladder
We saw a problem within the life insurance industry: getting covered took too long, involved too much paperwork, and required too many in-person meetings with sales agents. Having lost his father at a young age, our CEO, Jamie, was determined to make it easier for people to get the coverage they needed to provide for their families. So, we got to work. We developed a method of real-time underwriting leveraging AI and, in doing so, reduced the months-long process of applying for life insurance to minutes. Our digital experience is quick (instant decisions), loved by users (check out our Trustpilot or Google reviews) and prolific ($74 billion+ in coverage provided).

About The Role
We're looking for a Senior Security Engineer to help us build out our monitoring and detection capabilities.

Please note, this can be a hybrid role based in our Palo Alto headquarters or
a remote role based role in one of the 23 States Ladder is currently hiring in - AZ, CA, CO, CT, FL, GA, IA, KS, MA, MD, MN, NC, NH, NJ, NV, NY, OH, OR, PA, TX, VA, WA, WI.
Please note, Ladder is not currently sponsoring or transferring OPT or H1-B visa's.
What You'll Do

• Improve ongoing monitoring and detection capabilities by adding data sources, creating detections, and building workflows in Google SecOps and Security Command Center Enterprise
• Ensure we are protected against the latest thread by staying current on emerging security threats and actively monitoring various threat intelligence sources for latest trends, campaigns, and adversary TTPs
• Collaborate with our Engineering and Product teams via threat modeling and design reviews
• Work with legal team to define our policies for information security, business continuity and disaster recovery, vendor management, etc.
• Help secure our Google based corporate and production environments
• Assist IT in manage our SaaS applications and make sure people have access to what they should and not more
• Iterate on cloud, network, application, personnel, and device security
• Assess and secure internal and external applications, APIs, and CI/CD processes
• Assist with SOC2 and compliance program control implementation
• Triage alerts and respond to security incidents
• Collaborate with peers and stakeholders across the company to ensure our customers are protected as best as possible at all times

Who You Are...

• 5+ years of experience in information security, with a strong focus on application security and/or detection engineering
• 2+years of experience in information technology
• Working knowledge of secure coding practices, application security frameworks, and common vulnerabilities
• OSCP, HTB-CPTS, PNPT, eCPPTv2, or equivalent training/certs
• Apple workstation security experience
• Familiarity with Google Cloud Platform, Datadog, Google SecOps (Chronicle), JAMF Protect, etc
• Passion for building security tooling to enhance and automate security processes
• Contributions to open-source projects or communities
• Experience in securing AI/ML models and pipelines

What Excites Us...

• Love automating things and eliminating manual processes and work
• Know how to defend against the OSWAP Top Ten
• Have experience working in a security role
• Familiarity or interest in AWS, Kubernetes, Terraform, Clojure
• Feel comfortable talking with external stakeholders authoritatively about the ins and outs of our security posture
• Have experience developing, reviewing, and implementing infosec policies

What We Offer
Whether you work in our beautiful office in Palo Alto or remotely, Ladder is highly collaborative and fun. To support you in your role, we offer fantastic perks and benefits that reflect our mission of care and support, including:

• Excellent medical, dental, and vision coverage | We offer competitive healthcare and dental plans for you and your family.
• Flexible paid time off | Take the time that you need to rest and recharge, including our week-long winter holiday closure.
• Stock options | We offer competitive stock option packages to participate in the success of building Ladder.
• A rewarding 401k match program | We'll match up to 4% of your contributions as you save for your retirement goals.
• Commuter benefits | When you work from the office, you will receive pre-tax benefits for your commute and free parking.
• A stocked, beautiful new office | Located in downtown Palo Alto, our office was specifically designed to accommodate all working styles. We've invested in technology to support our hybrid team, plus we provide office snacks and catered lunches so that team members can work well and have fun together.
• Paid parental leave | We think it's crucial that new parents have time to adjust to their new lives without worrying about work, so we provide all parents inclusive of birthing, adoption, or fostering ten weeks of paid baby bonding.
• Work-from-home flexibility and support | We recognize that everyone's homelife is different and support remote and hybrid work. Upon joining, we provide a one-time $500 remote office stipend for all team members and then a monthly $150 stipend to cover WFH costs such as the internet.
• Fun company-wide events | Whether we work locally or remotely, we genuinely enjoy spending time together. That's why we plan fun virtual and in-person events to let loose and laugh.

The base pay range targeted for this position is
$$140, $184,000.00
per year. Base pay is determined by market location and may vary depending on job-related knowledge, skills, and experience. This role is eligible for equity and benefits as shared above.

Ladder is building a diverse team of talented and enthusiastic people. We are an equal opportunity workplace. At Ladder, differences are celebrated and supported to benefit our people, products, and community. Let us know why you're interested in this position and what unique contributions you can make to the Ladder team. We look forward to hearing from you.

By clicking "Submit Application," you acknowledge that you have read and agree to the Ladder Job Applicant Privacy Policy and Notice at Collection.

By clicking "Submit Application," you acknowledge that you have read and agree to the Ladder Job Applicant Privacy Policy and Notice at Collection.