Remote AppSec Engineer - Code Security & Cloud Risk

Ladder; Massachusetts; Teletrabalho; USD 109 000 - 130 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k match

Ladder Fit Program

Paid parental leave

Work-from-home flexibility

Fun company-wide events

Resumo da oferta

Ladder is hiring a Security Engineer/Analyst who blends application security engineering with risk management maturity. You’ll own the vulnerability management lifecycle across engineering teams and strengthen shift-left security in a heavy Clojure backend.

You’ll monitor cloud infrastructure, perform security risk reviews, support audits, and help drive governance while collaborating with management and auditors in a fast-growing environment.

Qualificações

• 4+ years of software engineering or cybersecurity experience.
• Hands-on within the JVM environment and reading functional code.
• Cloud SecOps experience and incident response background.
• Autonomous thinker who designs scalable security frameworks to prevent issues.
• Baseline certifications such as CompTIA Security+; CISSP is a major plus.

Responsabilidades

• Secure the code by partnering with development teams to champion app security vulnerability management.
• Configure and monitor cloud security posture using SIEM/SOAR/CSP tools.
• Conduct security risk reviews for internal architecture, vendors, and APIs.
• Maintain secure workspace, IAM, device compliance, and productivity tools.
• Mentor engineers on secure coding practices and secure defaults.

Conhecimentos

Experienced security professional

JVM environment

Cloud SecOps

Autonomous systems thinker

Security certifications

Formação académica

Bachelor's degree in Computer Science / Cybersecurity

Ferramentas

SIEM

SOAR

Kubernetes

Terraform

Datomic

BigQuery

Descrição da oferta de emprego

Ladder is hiring a Security Engineer/Analyst who blends application security engineering with risk management maturity. You’ll own the vulnerability management lifecycle across engineering teams and strengthen shift-left security in a heavy Clojure backend.

You’ll monitor cloud infrastructure, perform security risk reviews, support audits, and help drive governance while collaborating with management and auditors in a fast-growing environment.