Remote AppSec Engineer: Code-Driven Security & Cloud Guard

Ladder; Austin (TX); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Remote work

Health insurance

401k match

Wellness stipend

Paid parental leave

Job summary

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle within our development lifecycles. This remote role is based in the United States and supports a shift-left security approach across a heavy Clojure/JVM backend, balancing security operations with developer-facing risk management.

You will monitor cloud infrastructure, guide audits, and mentor engineers on secure coding practices while collaborating with teams and external auditors in a fast-paced

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on working within the JVM environment, reading functional code and collaborating with backend engineers.
• Hands-on experience securing modern cloud infrastructures and incident response.
• Thrives in dynamic environments and designs security frameworks to prevent repeats.
• Baseline certifications like CompTIA Security+; CISSP preferred.

Responsibilities

• Champion application security vulnerability management with development teams.
• Monitor cloud security posture using SIEM, SOAR, CSP, CNAPP tools.
• Conduct security reviews and risk assessments for internal architecture, vendors, and APIs.
• Maintain workspace security, IAM, device compliance, and secure productivity tools.
• Mentor engineers on secure coding practices and establish secure defaults.

Skills

Cybersecurity experience

JVM experience

Cloud security

Secure coding

Education

CS or related field

Tools

Clojure

GCP

Kubernetes

Docker

Terraform

Job description

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle within our development lifecycles. This remote role is based in the United States and supports a shift-left security approach across a heavy Clojure/JVM backend, balancing security operations with developer-facing risk management.

You will monitor cloud infrastructure, guide audits, and mentor engineers on secure coding practices while collaborating with teams and external auditors in a fast-paced