Remote Application Security Engineer — Vulnerability Lead

Ladder; Pennsylvania; Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Medical coverage

Flexible PTO

Stock options

401k match

Wellness stipend

Paid parental leave

WFH flexibility

Team events

Job summary

Ladder is seeking an Applications Security Engineer to own application security vulnerability management across development lifecycles. The role emphasizes hands-on work with a heavy JVM/Clojure ecosystem, risk assessments, and incident response in a fast-growing company.

You will influence secure coding practices and drive left-shift security across teams. Ideal candidates bring 4+ years of security or software engineering experience, competence in JVM environments, and relevant certifications.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on experience in JVM environment and reading functional code.
• Cloud SecOps practice and incident response experience.
• Autonomous thinker who designs security frameworks that prevent repeats.
• Baseline certs such as CompTIA Security+; CISSP preferred.

Responsibilities

• Secure the code by partnering with development teams to champion vulnerability management.
• Configure and monitor cloud security posture using SIEM, SOAR, CSP, CNAPP.
• Conduct security reviews and risk assessments on architecture, vendors, and APIs.
• Maintain workspace security, IAM, device compliance, and secure productivity tools.
• Mentor engineers in secure coding practices and scale secure defaults.

Job description

Ladder is seeking an Applications Security Engineer to own application security vulnerability management across development lifecycles. The role emphasizes hands-on work with a heavy JVM/Clojure ecosystem, risk assessments, and incident response in a fast-growing company.

You will influence secure coding practices and drive left-shift security across teams. Ideal candidates bring 4+ years of security or software engineering experience, competence in JVM environments, and relevant certifications.