Remote Security Engineer: AppSec & Cloud Risk Leader

Writing.io; United States; On-site; USD 122,000 - 144,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k match

Ladder Fit Program

Paid parental leave

Work-from-home flexibility

Fun company-wide events

Job summary

Ladder is seeking a Security Engineer / Analyst to own application security vulnerability management within a fast-growing environment. You will partner with development teams, assess risks, and help drive secure coding and governance practices.

You will monitor cloud infrastructure, respond to incidents, and support audits while collaborating with management and auditors. This role emphasizes hands-on code review and a shift-left security approach.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on experience coding in Clojure and working within the JVM environment.
• Experience securing modern cloud infrastructures and incident response.
• Hold baseline certifications such as CompTIA Security+; CISSP is highly preferred.

Responsibilities

• Secure the Code (Primary): triage vulnerabilities and assist with remediation code fixes.
• Security Ops: monitor cloud posture using SIEM, SOAR, CSP, CNAPP for real-time threats.
• Governance & Risk: conduct security reviews and risk assessments of architecture, vendors, and APIs.
• Protect the Workspace: manage IAM, device compliance, and secure productivity tools.
• Drive Technical Excellence: mentor engineers on secure coding and secure defaults.

Skills

Security engineering

Vulnerability management

Problem solving

Written communication

Education

Computer Science / Cyber Security foundation

Tools

Clojure

JVM

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking a Security Engineer / Analyst to own application security vulnerability management within a fast-growing environment. You will partner with development teams, assess risks, and help drive secure coding and governance practices.

You will monitor cloud infrastructure, respond to incidents, and support audits while collaborating with management and auditors. This role emphasizes hands-on code review and a shift-left security approach.