Remote AppSec Engineer: Code Security & CloudOps

Ladder; Manchester (NH); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k match

Remote work support

Wellness stipend

Job summary

Ladder is hiring a Security Engineer/Analyst to own application security vulnerability management within a heavy JVM-based backend. You’ll work closely with development teams to triage and fix code-level vulnerabilities while balancing security operations and risk reviews.

You will monitor cloud security posture, support audits, and mentor other engineers on secure coding practices in a dynamic, fast-growth environment. Remote work is available for qualified locations.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience in a related field.
• Hands-on experience in the JVM environment and reading functional code.
• Experience securing modern cloud infrastructures and incident response.
• Certified Professional with baseline certs like CompTIA Security+; CISSP preferred.

Responsibilities

• Secure the codebase by leading application security vulnerability management with development teams.
• Monitor and respond to security alerts using SIEM/SOAR/CSP/CNAPP tools.
• Conduct security reviews and risk assessments for internal architecture and third-party vendors.
• Ensure identity access management and secure day-to-day workspace security.

Skills

JVM experience

Cloud SecOps

Security certifications

Root-cause analysis

Security governance

Education

CS/Cyber Security degree

Tools

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Kubernetes

Docker

Terraform

Job description

Ladder is hiring a Security Engineer/Analyst to own application security vulnerability management within a heavy JVM-based backend. You’ll work closely with development teams to triage and fix code-level vulnerabilities while balancing security operations and risk reviews.

You will monitor cloud security posture, support audits, and mentor other engineers on secure coding practices in a dynamic, fast-growth environment. Remote work is available for qualified locations.