Remote AppSec Engineer: Code, Cloud & Risk

Ladder; Yuma (AZ); Remote; USD 109,000 - 144,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k match program

Ladder Fit Wellness stipend

Paid parental leave

Work-from-home flexibility with stiped

Fun company-wide events

Job summary

Ladder is hiring an Applications Security Engineer for a remote role based in one of 23 US states (including AZ). You will own security in the development lifecycle, focus on vulnerability management in a Clojure-heavy stack, and strengthen shift-left security. You’ll also monitor cloud security, perform risk reviews, and support audits.

The role requires 4+ years in security/engineering, JVM experience, and strong problem-solving. OPT/H1-B sponsorship is not available.

Qualifications

• 4+ years of software engineering or cybersecurity experience.
• Hands-on in JVM environments and secure coding practices.
• Experience securing modern cloud infrastructures and incident response.
• Ability to perform risk assessments and security reviews.
• Baseline certs such as CompTIA Security+; CISSP is a plus.

Responsibilities

• Lead application security vulnerability management with development teams.
• Monitor cloud security posture and respond to real-time threats.
• Conduct security reviews of architecture, vendors, and APIs.
• Maintain workspace security, IAM, and device compliance.
• Mentor engineers on secure coding and secure defaults.

Skills

JVM experience

Security operations

Risk management

Vulnerability management

Secure coding

Education

BS in CS or related field

Tools

GCP

Kubernetes

Docker

Terraform

GraphQL

Job description

Ladder is hiring an Applications Security Engineer for a remote role based in one of 23 US states (including AZ). You will own security in the development lifecycle, focus on vulnerability management in a Clojure-heavy stack, and strengthen shift-left security. You’ll also monitor cloud security, perform risk reviews, and support audits.

The role requires 4+ years in security/engineering, JVM experience, and strong problem-solving. OPT/H1-B sponsorship is not available.