Remote AppSec Engineer — Code & Cloud Security Leader

Ladder; Arkansas City (KS); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k match

Wellness stipend

Paid parental leave

Work-from-home flexibility

Remote office stipend

Team virtual events

Job summary

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle and embed security into development lifecycles. The role emphasizes a shift-left mindset, mentoring engineers on secure coding, and balancing production security with rapid delivery.

You'll work across the stack, assess risks in APIs and cloud infrastructure, and respond to security incidents while supporting compliance.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience, backed by a strong foundation in Computer Science, Cyber Security, or a related field.
• Hands-on working within the JVM environment. You are comfortable reading functional code, understanding immutable data structures, and collaborating directly with backend engineers on code-level fixes.
• Hands-on experience securing modern cloud infrastructures, as well as experience working incident response.
• Thrive in dynamic environments. You don't just clear alerts; you look for the root cause of issues to design security frameworks that prevent entire classes of vulnerabilities from happening in the first place.
• Hold baseline certifications such as CompTIA Security+ or equivalents. Having an advanced credential like the CISSP is highly preferred and considered a major plus.

Responsibilities

• Secure the Code (Primary): Partner directly with development teams to champion application security vulnerability management. You will triage vulnerabilities within a high-scale Clojure ecosystem and assist with remediation code fixes.
• Security Ops: Configure, fine-tune, and monitor our cloud security posture leveraging Security Operations tools (SIEM, SOAR, CSP, CNAPP) to detect and respond to threats in real time.
• Champion Governance & Risk: Conduct thorough Security Reviews and risk assessments on internal architecture, third-party vendors, and APIs to ensure alignment with our corporate risk tolerance and compliance standards.
• Protect the Workspace: Maintain and optimize our day-to-day corporate workspace security, ensuring identity access management, device compliance, and productivity tools are highly secure yet frictionless for the team.
• Drive Technical Excellence: Act as a security advocate across teams. Mentor engineers on secure coding practices, establish secure defaults, and make practical risk decisions that scale with our growth

Skills

Security professional

JVM experience

Cloud SecOps

Root-cause analysis

Certifications (Security+)

Job description

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle and embed security into development lifecycles. The role emphasizes a shift-left mindset, mentoring engineers on secure coding, and balancing production security with rapid delivery.

You'll work across the stack, assess risks in APIs and cloud infrastructure, and respond to security incidents while supporting compliance.