Remote AppSec Engineer — JVM & Cloud Security

Ladder; Madison (WI); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Excellent medical coverage

Flexible paid time off

Stock options

401k match

Remote work flexibility

Remote office stipend

Wellness stipend

Parental leave

Job summary

Ladder is seeking an Applications Security Engineer to lead vulnerability management and embed security into our development lifecycles. You will work with backend teams in a JVM/Clojure stack, monitor cloud security posture, and partner with auditors to ensure compliance in a fast-growing environment.

The role requires 4+ years in software or cybersecurity, hands-on cloud experience, and the ability to mentor engineers on secure coding practices while balancing day-to-day operations and risk

Qualifications

• 4+ years of software engineering and/or cybersecurity experience
• Hands-on experience in the JVM environment
• Hands-on experience securing modern cloud infrastructures and incident response
• Ability to interact with management and external auditors in a dynamic environment
• Baseline certifications such as CompTIA Security+; CISSP preferred

Responsibilities

• Champion application security vulnerability management with development teams
• Configure, fine-tune, and monitor cloud security posture using SIEM, SOAR, CSP, CNAPP
• Conduct security reviews and risk assessments on internal architecture, third-party vendors, and APIs
• Maintain workspace security including IAM and device compliance
• Mentor engineers on secure coding practices and secure defaults
• Drive security reporting and governance across teams

Skills

Problem solving

Writing skills

Self-motivated

Interpersonal communication

Education

Bachelor's degree in Computer Science or related field

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking an Applications Security Engineer to lead vulnerability management and embed security into our development lifecycles. You will work with backend teams in a JVM/Clojure stack, monitor cloud security posture, and partner with auditors to ensure compliance in a fast-growing environment.

The role requires 4+ years in software or cybersecurity, hands-on cloud experience, and the ability to mentor engineers on secure coding practices while balancing day-to-day operations and risk