Remote Principal AppSec Engineer — Secure-by-Design Leader

Ladders; United States; On-site; USD 172,000 - 240,000; Full time

Benefits offered by this job

Health benefits

Generous PTO

Professional development

Job summary

Ladders is seeking a Principal Application Security Engineer to lead security across modern software delivery environments, embedding secure-by-design practices from design through deployment. You will partner with engineering to strengthen secure coding, threat modeling, API protection, and CI/CD security.

This role supports AI security initiatives and aims to reduce friction in the software lifecycle. Location: Remote - US-based candidates only; no visa sponsorship.

Qualifications

• 10+ years in Application Security Engineering, with software development background.
• Expertise in secure architecture, coding practices, and threat modeling.
• Proficiency in authentication, authorization, API security, and OWASP Top 10.
• Hands-on security in stacks such as C#, Java, Python, or Go.
• Experience integrating security into CI/CD pipelines and developer workflows.

Responsibilities

• Lead secure code reviews, threat modeling, and design assessments for applications and APIs.
• Drive continuous improvement of application security controls in CI/CD environments.
• Identify and remediate control gaps and engineering friction in the software lifecycle.
• Define and advocate for secure coding standards and practices across the organization.
• Influence engineering design decisions and embed security in software development.
• Advance AI security practices and promote responsible AI use in engineering processes.
• Design and tune application-layer protections in partnership with cross-functional teams.

Skills

Secure coding

Threat modeling

API security

CI/CD security

Security architecture

Job description

Ladders is seeking a Principal Application Security Engineer to lead security across modern software delivery environments, embedding secure-by-design practices from design through deployment. You will partner with engineering to strengthen secure coding, threat modeling, API protection, and CI/CD security.

This role supports AI security initiatives and aims to reduce friction in the software lifecycle. Location: Remote - US-based candidates only; no visa sponsorship.