Remote Applications Security Engineer (AppSec & Cloud Ops)

Ladder; East Windsor Hill (CT); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k match program

Ladder Fit Program

Paid parental leave

Work-from-home flexibility and support

Fun company-wide events

Job summary

Ladder is seeking an Applications Security Engineer to embed within development lifecycles and own vulnerability management for our engineering teams. You’ll work in a modern, code-focused environment using Clojure and JVM, while also monitoring cloud security posture and coordinating with auditors.

The role emphasizes hands-on risk assessment, secure coding advocacy, and collaboration with management across a rapidly scaling organization.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on experience in a JVM environment and with secure coding practices.
• Experience securing modern cloud infrastructures and incident response.
• Ability to design security frameworks to prevent recurring vulnerabilities.
• Baseline security certifications such as CompTIA Security+; CISSP strongly preferred.

Responsibilities

• Secure the Code (Primary): champion application security vulnerability management with development teams.
• Security Ops: monitor cloud security posture using SIEM, SOAR, CSP, CNAPP to detect and respond to threats.
• Governance & Risk: conduct security reviews and risk assessments for architecture, vendors, and APIs.
• Protect the Workspace: ensure IAM, device compliance, and productivity tools remain secure yet usable.
• Drive Technical Excellence: mentor engineers on secure coding, establish secure defaults, scale risk decisions.

Skills

Security engineering

JVM experience

Cloud SecOps

Vulnerability management

Threat detection

Secure coding

Education

CompTIA Security+

CISSP (preferred)

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Job description

Ladder is seeking an Applications Security Engineer to embed within development lifecycles and own vulnerability management for our engineering teams. You’ll work in a modern, code-focused environment using Clojure and JVM, while also monitoring cloud security posture and coordinating with auditors.

The role emphasizes hands-on risk assessment, secure coding advocacy, and collaboration with management across a rapidly scaling organization.