Remote AppSec & Cloud Risk Engineer (Clojure/JVM)

Ladder; New Jersey; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision

Flexible PTO

Stock options

401k match

Paid parental leave

Remote work stipend

Job summary

Ladder is seeking a SecOps/AppSec Engineer to embed in our development lifecycles and own application security vulnerability management for engineering teams. The role emphasizes hands-on Clojure and JVM work while strengthening our shift-left security approach across cloud, tooling, and code.

You will monitor cloud security, respond to incidents, conduct risk reviews, and support audits, all while mentoring engineers on secure coding practices and secure defaults in a fast-paced environment.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on coding in Clojure and JVM; read and fix functional code.
• Experience securing modern cloud infrastructures and incident response.
• Ability to conduct security risk reviews and support compliance.

Responsibilities

• Secure the code: champion application security vulnerability management with dev teams.
• Security Ops: configure, fine-tune, and monitor cloud security posture (SIEM/SOAR/CSP).
• Governance & risk: conduct security reviews and risk assessments with vendors/APIs.
• Maintain workspace security: IAM, device compliance, tooling protection.
• Mentor engineers on secure coding practices and secure defaults.

Skills

Clojure

JVM

Cloud security

Incident response

Secure coding

Risk assessment

Education

BS in CS or related field

Tools

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking a SecOps/AppSec Engineer to embed in our development lifecycles and own application security vulnerability management for engineering teams. The role emphasizes hands-on Clojure and JVM work while strengthening our shift-left security approach across cloud, tooling, and code.

You will monitor cloud security, respond to incidents, conduct risk reviews, and support audits, all while mentoring engineers on secure coding practices and secure defaults in a fast-paced environment.