Remote AppSec Engineer — Secure Code & Cloud Ops (Equity)

Ladder; Boston (MA); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k match up to 4%

WFH flexibility and remote office stip

Job summary

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle within a fast-growing, cloud-based platform built on Clojure. You will work with development teams to triage and remediate vulnerabilities and strengthen our shift-left security approach.

You will monitor cloud security posture, conduct risk assessments, and mentor engineers on secure coding practices while collaborating with external auditors to ensure compliance. Remote, nationwide eligibility.

Qualifications

• 4+ years in software engineering and/or cybersecurity.
• Hands-on working within the JVM environment; comfortable with functional code.

Responsibilities

• Lead application security vulnerability management within dev lifecycles.
• Monitor and improve cloud security posture with SIEM/SOAR tools.
• Conduct security reviews and risk assessments for architecture and third-party vendors.
• Mentor engineers on secure coding practices and secure defaults.
• Collaborate with auditors to ensure governance and compliance.

Skills

4+ years experience

JVM experience

Cloud SecOps

Secure coding advocacy

Problem solving

Education

CompTIA Security+

CISSP preferred

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle within a fast-growing, cloud-based platform built on Clojure. You will work with development teams to triage and remediate vulnerabilities and strengthen our shift-left security approach.

You will monitor cloud security posture, conduct risk assessments, and mentor engineers on secure coding practices while collaborating with external auditors to ensure compliance. Remote, nationwide eligibility.