Remote AppSec Engineer — Secure Code & Cloud Ops

Ladder; New York (NY); Remote; USD 122,000 - 144,000; Full time

Benefits offered by this job

Excellent health coverage

Flexible PTO

Winter holiday closure

Stock options

401k match up to 4%

Wellness stipend

Paid parental leave

Remote work support

Remote office stipend

Team virtual events

Job summary

Ladder is seeking an Applications Security Engineer to own the vulnerability lifecycle within our development lifecycles. You’ll work cross-functionally to secure our codebase, monitor cloud posture, and drive risk-based decisions in a fast-growing, remote-friendly environment.

Ideal candidates bring 4+ years in software/cybersecurity, hands-on JVM experience, and strong writing/problem-solving skills. Tiered base pay and extensive benefits accompany the role.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on work in a JVM environment and reading functional code.
• Experience securing cloud infrastructures and incident response.
• Certifications such as CompTIA Security+; CISSP preferred.

Responsibilities

• Secure the code: champion application security vulnerability management with development teams.
• Security Ops: monitor cloud security posture and respond to threats in real time.
• Governance & Risk: conduct security reviews and risk assessments for architecture and vendors.
• Protect the workspace: manage IAM, device compliance, and productivity tools securely.
• Drive technical excellence: mentor engineers on secure coding and secure defaults.

Skills

Software engineering

Cybersecurity

JVM experience

Cloud SecOps

Problem solving

Education

Computer Science

Cyber Security

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking an Applications Security Engineer to own the vulnerability lifecycle within our development lifecycles. You’ll work cross-functionally to secure our codebase, monitor cloud posture, and drive risk-based decisions in a fast-growing, remote-friendly environment.

Ideal candidates bring 4+ years in software/cybersecurity, hands-on JVM experience, and strong writing/problem-solving skills. Tiered base pay and extensive benefits accompany the role.