Remote Applications Security Engineer (AppSec & Cloud)

Ladder; Sacramento (CA); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

WFH flexibility

401k match

Remote office stipend

Wellness stipend

Stock options

Job summary

Ladder is seeking an Applications Security Engineer to own vulnerability management across our development lifecycles, with a focus on a JVM-based stack. You will partner with engineering teams to strengthen secure coding practices, monitor cloud security posture, and support audits in a fast-growing, remote-capable environment.

The role demands hands-on experience with security engineering and risk management, conducting security reviews, and guiding teams toward secure defaults while balancing

Qualifications

• 4+ years of software engineering and/or cybersecurity experience
• Hands-on in the JVM environment and read functional code
• Cloud security operations experience and incident response
• Experience with secure coding and risk-based decisions
• Certifications such as Security+ or CISSP preferred

Responsibilities

• Secure the code by partnering with development teams to manage application security vulnerabilities
• Configure and monitor cloud security posture using SIEM/SOAR/CSP/CNAPP
• Conduct security reviews and risk assessments for internal architecture and vendors
• Maintain day-to-day workspace security including IAM and device compliance
• Mentor engineers on secure coding practices and secure defaults
• Drive security across teams and support audits and compliance efforts

Skills

Security engineering

Risk management

Vulnerability management

JVM experience

Cloud security

Incident response

Security+ CISSP

Secure coding

Education

Computer Science or Cyber Security degree

Tools

GCP

Kubernetes

Docker

Terraform

GraphQL

BigQuery

Job description

Ladder is seeking an Applications Security Engineer to own vulnerability management across our development lifecycles, with a focus on a JVM-based stack. You will partner with engineering teams to strengthen secure coding practices, monitor cloud security posture, and support audits in a fast-growing, remote-capable environment.

The role demands hands-on experience with security engineering and risk management, conducting security reviews, and guiding teams toward secure defaults while balancing