Remote Applications Security Engineer (AppSec & Cloud)

Ladder; Baltimore (MD); Remote; USD 109,000 - 144,000; Full time

Benefits offered by this job

Health insurance

Dental and vision

401k match

Flexible paid time off

Remote work stipend

Wellness stipend

Parental leave

Remote office setup stipend

Job summary

Ladder is seeking an Applications Security Engineer to own vulnerability management across the development lifecycle in a remote role based in the United States. You will work closely with engineering teams using a strong focus on Clojure-backed systems and a shift-left security approach.

The role spans monitoring cloud infrastructure, conducting risk reviews, and supporting compliance audits, while encouraging secure coding and practical risk decisions to scale with growth.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on in the JVM environment with code-level fixes.
• Experience securing modern cloud infrastructures and incident response.
• Ability to design security frameworks to prevent vulnerabilities.

Responsibilities

• Secure the code by partnering with development teams to manage vulnerabilities.
• Configure and monitor cloud security posture (SIEM, SOAR, CNAPP).
• Conduct security reviews and risk assessments of architectures, vendors, and APIs.
• Maintain workspace security, identity access management, and device compliance.
• Mentor engineers on secure coding practices and secure defaults.

Skills

Application security

JVM experience

Cloud SecOps

Risk assessment

Secure coding practices

Education

Bachelor's degree in Computer Science or related

Tools

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking an Applications Security Engineer to own vulnerability management across the development lifecycle in a remote role based in the United States. You will work closely with engineering teams using a strong focus on Clojure-backed systems and a shift-left security approach.

The role spans monitoring cloud infrastructure, conducting risk reviews, and supporting compliance audits, while encouraging secure coding and practical risk decisions to scale with growth.