Remote AppSec Engineer — Clojure & Cloud SecOps

Ladder; Texas; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health, dental, vision

Flexible PTO

Stock options

401(k) match

Paid parental leave

Remote work stipend

Job summary

Ladder is seeking a SecOps/AppSec Engineer to embed within development lifecycles, owning application security vulnerability management and secure coding practices. The role emphasizes hands-on Clojure and JVM work, cloud security monitoring, and collaboration with backend teams.

You will balance security operations, risk reviews, and compliance, while guiding engineers to adopt secure defaults. Remote-first with national scope in the US. Competitive equity and benefits offered.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on coding in Clojure and JVM environment.
• Experience securing cloud infrastructure and incident response.
• Ability to read functional code and collaborate with backend engineers on fixes.
• Strong problem-solving and writing skills.

Responsibilities

• Secure the Code by partnering with development teams to manage application security vulnerability management.
• Security Ops: monitor cloud posture with SIEM, SOAR, CSP, CNAPP to detect and respond in real time.
• Governance & Risk: conduct security reviews and risk assessments for architecture, vendors, and APIs.
• Maintain workspace security including identity access management and device compliance.
• Mentor engineers on secure coding practices and secure defaults.

Skills

Clojure

JVM

TypeScript

JavaScript

Cloud security

Incident response

Security engineering

Education

BS in Computer Science or related field

Tools

Google Cloud Platform

Kubernetes

Docker

Terraform

GraphQL

Datomic

BigQuery

Kafka

Chronicle

GSOC

Job description

Ladder is seeking a SecOps/AppSec Engineer to embed within development lifecycles, owning application security vulnerability management and secure coding practices. The role emphasizes hands-on Clojure and JVM work, cloud security monitoring, and collaboration with backend teams.

You will balance security operations, risk reviews, and compliance, while guiding engineers to adopt secure defaults. Remote-first with national scope in the US. Competitive equity and benefits offered.