Cloud Security Engineer — Secure Coding & IAM

Ladder; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Flexible paid time off

Stock options

401k match (up to 4%)

Monthly wellness stipend

Parental leave (10 weeks)

Remote office stipend

Monthly WFH internet stipend

Job summary

Ladder is seeking a security-minded software engineer to champion vulnerability management in a fast-moving, JVM-based environment. You will triage, remediate, and guide secure coding practices across teams, while configuring and monitoring cloud security posture using SIEM, SOAR, CSP, and CNAPP.

You will review risks in internal architecture, third-party vendors, and APIs, and help maintain identity access management and device compliance. CISSP or Security+ credentials strengthen candidacy.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on experience coding in Clojure and working within the JVM environment.
• Experience securing modern cloud infrastructures and incident response.
• Baseline certifications such as CompTIA Security+ or equivalent.
• Strong foundation in Computer Science or Cyber Security.
• Advanced credentials like CISSP are preferred.

Responsibilities

• Partner with development teams to champion application security vulnerability management.
• Triage vulnerabilities within a high-scale Clojure ecosystem and assist with remediation code fixes.
• Configure, fine-tune, and monitor cloud security posture using SIEM, SOAR, CSP, and CNAPP.
• Conduct security reviews and risk assessments on internal architecture, third-party vendors, and APIs.
• Maintain corporate workspace security including identity access management and device compliance.
• Mentor engineers on secure coding practices and establish secure defaults.

Skills

Clojure

JVM

Security vulnerability management

Education

Computer Science degree

CompTIA Security+

CISSP

Tools

SIEM

SOAR

CNAPP

CSP

Job description

Ladder is seeking a security-minded software engineer to champion vulnerability management in a fast-moving, JVM-based environment. You will triage, remediate, and guide secure coding practices across teams, while configuring and monitoring cloud security posture using SIEM, SOAR, CSP, and CNAPP.

You will review risks in internal architecture, third-party vendors, and APIs, and help maintain identity access management and device compliance. CISSP or Security+ credentials strengthen candidacy.