Remote AppSec Engineer: Clojure & Cloud Security

Ladder; Iowa; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

Flexible PTO

Stock options

401k matching

Parental leave

Remote work stipend

Job summary

Ladder is seeking an experienced SecOps/AppSec Engineer to own application security across development lifecycles. You will work directly with engineering teams, focusing on vulnerability management in a JVM/Clojure-heavy stack and strengthening shift-left security practices.

You will monitor cloud infrastructure, respond to incidents, and support governance and risk reviews while maintaining secure workspaces and enabling rapid, secure delivery.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.

Responsibilities

• Secure the Code by partnering with development teams to champion application security vulnerability management.
• Configure, fine-tune, and monitor cloud security posture using security ops tools to detect threats in real time.
• Conduct security reviews and risk assessments for internal architecture and third-party vendors.
• Maintain identity access management and device compliance for day-to-day workspace security.
• Mentor engineers on secure coding practices and secure defaults.
• Support security audits and collaborate with compliance teams.

Skills

Security mindset

Vulnerability management

Cloud security

Risk assessment

Code reviews

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

SIEM

SOAR

CNAPP

Job description

Ladder is seeking an experienced SecOps/AppSec Engineer to own application security across development lifecycles. You will work directly with engineering teams, focusing on vulnerability management in a JVM/Clojure-heavy stack and strengthening shift-left security practices.

You will monitor cloud infrastructure, respond to incidents, and support governance and risk reviews while maintaining secure workspaces and enabling rapid, secure delivery.