Remote AppSec Engineer: Code & Cloud

Ladder; Columbus (OH); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Flexible paid time off

Stock options

401k match

Ladder Fit Program

Paid parental leave

WFH stipend and remote office support

Team events

Job summary

Ladder is seeking an Applications Security Engineer to own the security of our development lifecycles. You will champion application security vulnerability management, triage issues in a high‑scale Clojure/JVM ecosystem, and help shift security left across engineering teams.

In addition to AppSec, you will monitor cloud infrastructure, conduct security reviews, support audits, and mentor engineers on secure coding practices.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on in a JVM environment and comfortable with functional code.
• Experience securing modern cloud infrastructures and incident response.
• Ability to design security frameworks that prevent broad classes of issues.
• Baseline certification such as CompTIA Security+; CISSP preferred.

Responsibilities

• Secure the code: champion application security vulnerability management and triage issues.
• Security ops: monitor cloud posture and respond to threats in real time.
• Governance & risk: perform security reviews and risk assessments with vendors and APIs.
• Protect the workspace: manage identity access, device compliance, and productivity tools.
• Drive technical excellence: mentor engineers on secure coding practices and secure defaults.

Skills

Security professional

JVM environment

Cloud SecOps

Autonomous thinker

Security+ certified

Education

Computer Science or Cyber Security background

Tools

GCP

Kubernetes

Docker

Terraform

GraphQL

Job description

Ladder is seeking an Applications Security Engineer to own the security of our development lifecycles. You will champion application security vulnerability management, triage issues in a high‑scale Clojure/JVM ecosystem, and help shift security left across engineering teams.

In addition to AppSec, you will monitor cloud infrastructure, conduct security reviews, support audits, and mentor engineers on secure coding practices.