Remote Applications Security Engineer (AppSec & Cloud Ops)

Ladder; Philadelphia (Philadelphia County); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Flexible PTO

Winter holiday closure

Stock options

401k match

Ladder Fit Program

Remote work stipend

Remote office stipend

Paid parental leave

Company events

WFH cost stipend

Wellness stipend

Job summary

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle within our development lifecycles. The role emphasizes hands-on code review in a Clojure/JVM environment and cross-team collaboration to strengthen shift-left security.

You will monitor and improve cloud security posture, conduct risk assessments, and support audits while enabling secure engineering practices across the org. This is a remote role within eligible U.S. states.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience in a professional setting.
• Hands-on experience working in a JVM environment and reading/understanding functional code.
• Experience securing modern cloud infrastructures and handling incident response scenarios.
• Certified: CompTIA Security+ or equivalent; CISSP preferred.
• Ability to interact with management and external auditors in a fast-paced environment.

Responsibilities

• Secure the codebase by partnering with development teams to manage application security vulnerabilities in a large-scale Clojure ecosystem.
• Operate and monitor cloud security posture using SIEM, SOAR, CSP, and CNAPP tools to detect and respond to threats.
• Conduct security reviews and risk assessments on internal architectures, third-party vendors, and APIs.
• Maintain workspace security including identity access management and device compliance.
• Mentor engineers on secure coding practices and promote secure defaults across teams.

Skills

JVM experience

Cloud security

Incident response

Security certifications

Education

Bachelor's degree in Computer Science or related field

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle within our development lifecycles. The role emphasizes hands-on code review in a Clojure/JVM environment and cross-team collaboration to strengthen shift-left security.

You will monitor and improve cloud security posture, conduct risk assessments, and support audits while enabling secure engineering practices across the org. This is a remote role within eligible U.S. states.