Remote Applications Security Engineer (AppSec & Cloud)

Ladder; Florida; Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Flexible PTO

Stock options

401k match

Wellness stipend

Parental leave

WFH stipend

Virtual events

Job summary

Ladder is seeking an Applications Security Engineer for a remote role based in Florida among 23 states. You will drive application security vulnerability management across engineering teams, with hands-on work in a Clojure-based backend and cloud environments.

You’ll partner with developers to triage, remediate, and prevent vulnerabilities early in the lifecycle. The ideal candidate has 4+ years in software or cybersecurity, strong JVM experience, and baseline security certifications.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on working within the JVM environment and reading functional code.
• Experience securing cloud infrastructures and incident response.
• Ability to thrive in dynamic, scalable environments.
• Baseline certifications such as Security+; CISSP highly preferred.

Responsibilities

• Secure the Code: champion application security vulnerability management with development teams.
• Security Ops: monitor cloud security posture using SIEM, SOAR, CSP, CNAPP.
• Governance & Risk: conduct security reviews and risk assessments of internal architecture and vendors.
• Protect the Workspace: manage IAM, device compliance, and secure productivity tools.
• Drive Technical Excellence: mentor engineers on secure coding and scalable risk decisions.

Skills

4+ years of software or cybersecurity

JVM experience

Security fundamentals

Threat detection & risk

Security certifications

Education

Bachelor's degree in CS or related field

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Job description

Ladder is seeking an Applications Security Engineer for a remote role based in Florida among 23 states. You will drive application security vulnerability management across engineering teams, with hands-on work in a Clojure-based backend and cloud environments.

You’ll partner with developers to triage, remediate, and prevent vulnerabilities early in the lifecycle. The ideal candidate has 4+ years in software or cybersecurity, strong JVM experience, and baseline security certifications.