Remote AppSec Engineer — Cloud & Code Security Lead

Ladder; Clayton (NC); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Health coverage

Flexible PTO

Stock options

401k match

WFH stipend

Parental leave

Remote work

Job summary

Ladder is seeking an Applications Security Engineer to work remotely in one of 23 states, including North Carolina. You will own application security vulnerability management within development lifecycles, with a focus on a Clojure backend, and you will monitor cloud infrastructure while supporting audits.

You should have 4+ years in security/engineering, JVM experience, and CISSP or Security+ credentials as a major plus. Remote work is supported with benefits.

Qualifications

• 4+ years in software engineering and/or cybersecurity.
• Hands-on JVM experience; read functional code and work with backend engineers.
• Cloud SecOps experience and incident response.
• Ability to work autonomously in a fast-paced, scaling environment.
• Baseline certifications such as CompTIA Security+; CISSP preferred.

Responsibilities

• Champion application security vulnerability management with development teams.
• Monitor and improve cloud security posture using SIEM, SOAR, CSP, CNAPP.
• Conduct security reviews and risk assessments of architectures and vendors.
• Maintain secure workspace and identity/device compliance.
• Mentor engineers on secure coding practices and scalable security decisions.

Skills

Security engineering

Vulnerability management

Cloud security

JVM / Clojure knowledge

Secure coding practices

Education

Computer Science degree

Cybersecurity degree

Tools

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking an Applications Security Engineer to work remotely in one of 23 states, including North Carolina. You will own application security vulnerability management within development lifecycles, with a focus on a Clojure backend, and you will monitor cloud infrastructure while supporting audits.

You should have 4+ years in security/engineering, JVM experience, and CISSP or Security+ credentials as a major plus. Remote work is supported with benefits.