SecOps/AppSec Engineer, Ladder
Clojure Required
$109-144k
Salary dependent on location + Stock options
More information about location
Flexible life insurance provider
Job no longer available
Flexible life insurance provider
101-200 employees
Job no longer available
$109-144k
Salary dependent on location + Stock options
More information about location
101-200 employees
Company mission
To help others set their families up for success.
Role
Who you are
- The ideal candidate is well-rounded and has the ability to interact with all levels of management and external auditors, and operate effectively in a rapidly scaling, dynamic environment
- We are looking for someone who is organized, self-motivated, has excellent problem-solving and writing skills, and enjoys working with people in a challenging and fast-paced environment
- An Experienced Security Professional: 4+ years of software engineering and/or cybersecurity experience, backed by a strong foundation in Computer Science, Cyber Security, or a related field
- Clojure-Capable: Hands-on experience coding in Clojure and working within the JVM environment. You are comfortable reading functional code, understanding immutable data structures, and collaborating directly with backend engineers on code-level fixes
- A Cloud SecOps Practitioner: Hands-on experience securing modern cloud infrastructures, as well as experience working incident response
- An Autonomous Systems Thinker: Thrive in dynamic environments. You don't just clear alerts; you look for the root cause of issues to design security frameworks that prevent entire classes of vulnerabilities from happening in the first place
- Certified Professional: Hold baseline certifications such as CompTIA Security+ or equivalents. Having an advanced credential like the CISSP is highly preferred and considered a major plus
What the job involves
- We are looking for a cybersecurity unicorn. A Security Engineer / Analyst who brings a rare blend of application security engineering and risk management maturity
- In this role, you will be the driving force behind our vulnerability management lifecycle, balancing day-to-day security operations with development-facing vulnerability management and compliance
- Your primary mission will be embedded within our development lifecycles, taking ownership of application security vulnerability management for our engineering teams
- Because our backend infrastructure runs heavily on Clojure, you won't just be running automated scanners, you will actively look at code and leverage your functional programming experience to strengthen our shift-left security philosophy
- Beyond AppSec, you will wear multiple hats: monitoring our cloud infrastructure and responding to alerts, conducting security risk reviews, supporting compliance audits, and ensuring our day-to-day workspace remains locked down
- In this role, you will have the opportunity to drive innovation within the reporting function and help build out the accounting function
- Secure the Code (Primary): Partner directly with development teams to champion application security vulnerability management. You will triage vulnerabilities within a high-scale Clojure ecosystem and assist with remediation code fixes
- Security Ops: Configure, fine-tune, and monitor our cloud security posture leveraging Security Operations tools (SIEM, SOAR, CSP, CNAPP) to detect and respond to threats in real time
- Champion Governance & Risk: Conduct thorough Security Reviews and risk assessments on internal architecture, third-party vendors, and APIs to ensure alignment with our corporate risk tolerance and compliance standards
- Protect the Workspace: Maintain and optimize our day-to-day corporate workspace security, ensuring identity access management, device compliance, and productivity tools are highly secure yet frictionless for the team
- Drive Technical Excellence: Act as a security advocate across teams. Mentor engineers on secure coding practices, establish secure defaults, and make practical risk decisions that scale with our growth
- Technologies Used:
- Backend & Code: Clojure, JVM, TypeScript, JavaScript
- Cloud & Infrastructure: GCP, Kubernetes, Docker, Terraform, GraphQL
- Security & Data Operations: Google Security Command Center, Chronicle, Datomic, BigQuery, Kafka
Our take
Ladder is a life insurance company whose primary aim is to simplify the process of acquiring life insurance. In the past, getting coverage for life insurance has been a lengthy and time-consuming affair, but with Ladder, applicants can answer a few questions and sign up on their phones.
Jamie, the CEO and co-founder, felt the life-changing impact of life insurance on his own family when he lost his father at a young age before struggling to get life insurance policies for himself as an adult.
Ladder will face stiff competition when traditional insurers undergo the digital transformation needed to join Ladder in offering five-minute life insurance policies via smartphone. However, Ladder's strong brand, technology-first approach, and early-mover advantage position it well to capture a meaningful share of this growing market.
Steph
Company Specialist at Welcome to the Jungle
Insights
-5% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Oct 2021
$100m
SERIES D
Feb 2020
$37.5m
SERIES C
Total funding: $196.1m
Company benefits
- One-time stipend to support remote and hybrid work
- Recurring stipend to cover WFH costs
- 401k Match: Ladder matches your 401(k) contribution, dollar-for-dollar, up to 4% of your salary.
- Commuter Benefits: We offer a pre-tax transit account, as well as free employee parking.
- Catered Lunch: In-office employees get catered lunch every day from a variety of local restaurants.
- Ladder Fit: Ladder reimburses up to $50 per month for eligible wellness-related expenses.
- Baby Bonding: We offer 10 weeks paid leave when you welcome a new addition.
- Vacation: We encourage our employees to take time off so they can return relaxed and refreshed.
- Awesome Benefits: We offer medical, dental, vision, life, FSA, and short & long term disability.
Company HQ
Downtown North, Palo Alto, CA
Leadership
Jamie Hale
(Co-Founder & CEO)Previously a Founding Partner at Aldenwood Capital and Partner at Oak Hill Investment Management.
Laura Hale
(Co-Founder & CPO)Previously an Associate at Robert M. Bass and The Carlyle Group.
Share this job
View 1 more job at Ladder