Security Engineer / Analyst

Ladder is a company focused on revolutionizing the life insurance industry through technology and real-time underwriting. They are seeking a Security Engineer / Analyst to manage application security vulnerability processes, collaborate with engineering teams, and enhance their security posture across cloud infrastructures.

Responsibilities:

• Secure the Code (Primary): Partner directly with development teams to champion application security vulnerability management. You will triage vulnerabilities within a high-scale Clojure ecosystem and assist with remediation code fixes
• Security Ops: Configure, fine-tune, and monitor our cloud security posture leveraging Security Operations tools (SIEM, SOAR, CSP, CNAPP) to detect and respond to threats in real time
• Champion Governance & Risk: Conduct thorough Security Reviews and risk assessments on internal architecture, third-party vendors, and APIs to ensure alignment with our corporate risk tolerance and compliance standards
• Protect the Workspace: Maintain and optimize our day-to-day corporate workspace security, ensuring identity access management, device compliance, and productivity tools are highly secure yet frictionless for the team
• Drive Technical Excellence: Act as a security advocate across teams. Mentor engineers on secure coding practices, establish secure defaults, and make practical risk decisions that scale with our growth

Requirements:

• 4+ years of software engineering and/or cybersecurity experience, backed by a strong foundation in Computer Science, Cyber Security, or a related field
• Hands-on experience coding in Clojure and working within the JVM environment
• Hands-on experience securing modern cloud infrastructures, as well as experience working incident response
• Thrive in dynamic environments
• Hold baseline certifications such as CompTIA Security+ or equivalents
• Having an advanced credential like the CISSP is highly preferred and considered a major plus