Remote AppSec Engineer & Cloud Defender

Ladder; United States; Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Medical coverage

Dental & Vision

Stock options

401k match

Remote work

WFH stipend

Parental leave

Team events

Job summary

Ladder is seeking an Applications Security Engineer to embed in our development lifecycles, owning application security vulnerability management for JVM-based services. You will also monitor cloud security posture, respond to incidents, and support audits in a fast-growing, remote-friendly environment.

The ideal candidate has 4+ years in security or software engineering, hands-on JVM experience, and cloud security operations expertise.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on working within the JVM environment and reading functional code.
• Experience securing modern cloud infrastructures and incident response.
• Ability to operate in dynamic, rapidly scaling environments and communicate with management.

Responsibilities

• Secure the Code: champion application security vulnerability management with development teams and remediate fixes.
• Security Ops: monitor and improve cloud security posture and respond to threats in real time.
• Governance & Risk: conduct security reviews and risk assessments for internal architectures and vendors.
• Protect the Workspace: manage identity access, device compliance, and productivity tools securely.
• Drive Technical Excellence: mentor engineers on secure coding, establish secure defaults, scale risk decisions.

Skills

Software engineering

Cybersecurity

JVM experience

Cloud security

Education

CompTIA Security+

CISSP (preferred)

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking an Applications Security Engineer to embed in our development lifecycles, owning application security vulnerability management for JVM-based services. You will also monitor cloud security posture, respond to incidents, and support audits in a fast-growing, remote-friendly environment.

The ideal candidate has 4+ years in security or software engineering, hands-on JVM experience, and cloud security operations expertise.