Remote AppSec Engineer: Secure Coding & Cloud Defense

Ladder; United States; Remote; USD 109,000 - 144,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k

Remote work support

Wellness stipend

Life/work balance

Job summary

Ladder is seeking an Applications Security Engineer to own application security vulnerability management within a JVM-centric, cloud-native setup. You’ll collaborate with development teams to embed secure coding practices and strengthen shift-left security while guarding cloud infrastructure.

The role blends security risk reviews, incident response, and building a robust security culture across fast-paced engineering teams. Remote work is supported in the U.S.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on working within the JVM environment and reading functional code.
• Cloud SecOps experience including incident response.
• Autonomous thinker with root-cause analysis to prevent vulnerabilities.
• Baseline certifications such as CompTIA Security+; CISSP preferred.

Responsibilities

• Secure the Code: champion application security vulnerability management with development teams.
• Security Ops: monitor cloud security posture and detect threats in real time.
• Governance & Risk: conduct security reviews and risk assessments with vendors and APIs.
• Protect the Workspace: manage identity access, device compliance, and secure productivity tools.
• Drive Technical Excellence: mentor engineers on secure coding practices and secure defaults.

Skills

Security engineering

Vulnerability management

Cloud security

Incident response

Secure coding practices

JVM experience

Education

CS/Cyber Security degree

Tools

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking an Applications Security Engineer to own application security vulnerability management within a JVM-centric, cloud-native setup. You’ll collaborate with development teams to embed secure coding practices and strengthen shift-left security while guarding cloud infrastructure.

The role blends security risk reviews, incident response, and building a robust security culture across fast-paced engineering teams. Remote work is supported in the U.S.