Applications Security Engineer

This is a fully remote position, open to applicants in Arizona, +21 more states.

📋 Description

• Collaborate with development teams to manage application security vulnerabilities.

• Evaluate vulnerabilities within a large-scale Clojure ecosystem.

• Support remediation through code fixes.

• Set up, optimize, and oversee cloud security posture utilizing SIEM, SOAR, CSP, and CNAPP tools.

• Identify and respond to threats in real-time.

• Perform security assessments and risk evaluations for internal infrastructure, third-party vendors, and APIs.

• Ensure corporate workspace security, which includes identity access management, device compliance, and productivity tools.

• Guide engineers in secure coding practices.

• Establish secure defaults and make scalable risk-based decisions.

⛳️ Requirements

• Over 4 years of experience in software engineering and/or cybersecurity.

• Strong background in Computer Science, Cyber Security, or a related discipline.

• Practical experience in the JVM environment.

• Capability to read functional code and comprehend immutable data structures.

• Experience in securing contemporary cloud infrastructures.

• Familiarity with incident response procedures.

• Possession of a foundational certification such as CompTIA Security+ or its equivalent.

• CISSP certification is highly preferred.

• Must reside in one of Ladder’s eligible U.S. states, excluding the SF Bay Area, New York City, and Seattle.

• Ladder is not currently offering sponsorship or transferring OPT or H1-B visas.

🏝️ Benefits

• Comprehensive medical, dental, and vision coverage for you and your family.

• Flexible paid time off, including a week-long winter holiday closure.

• Competitive stock option packages.

• 401k matching up to 4% of contributions.

• Monthly wellness stipend through Ladder Fit.

• Ten weeks of paid parental leave for birthing, adoption, or fostering.

• One-time stipend for setting up a remote office.

• Monthly stipend to cover work-from-home expenses, such as internet costs.

• Engaging virtual company-wide events.