Remote AppSec & Cloud Risk Engineer

Ladder; Nevada; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Excellent health coverage

Flexible paid time off

Stock options

401k match up to 4%

Paid parental leave

Remote work stipend and WFH support

Job summary

Ladder is seeking an SecOps/AppSec Engineer (Clojure required) to own application security vulnerability management across engineering teams. You will also monitor cloud security posture, support risk reviews, and ensure secure workstation practices in a fast-paced, growth-focused environment.

Ideal candidates have 4+ years in software or cybersecurity, hands-on Clojure, and experience with cloud security and incident response.

Qualifications

• 4+ years in software engineering or cybersecurity.
• Hands-on coding in Clojure and JVM.
• Experience securing modern cloud infrastructures.
• Ability to read functional code and fix backend issues.

Responsibilities

• Secure the Code: Champion application security vulnerability management with development teams.
• Security Ops: Configure and monitor cloud security posture using SIEM/SOAR/CSP/CNAPP to detect threats in real time.
• Governance & Risk: Conduct security reviews and risk assessments for internal architecture, vendors and APIs.
• Maintain corporate workspace security including IAM, device compliance, and productivity tools.
• Mentor engineers on secure coding practices and secure defaults.

Skills

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Tools

Datomic

BigQuery

Kafka

Google Security Command Center

Chronicle

Job description

Ladder is seeking an SecOps/AppSec Engineer (Clojure required) to own application security vulnerability management across engineering teams. You will also monitor cloud security posture, support risk reviews, and ensure secure workstation practices in a fast-paced, growth-focused environment.

Ideal candidates have 4+ years in software or cybersecurity, hands-on Clojure, and experience with cloud security and incident response.