Remote AppSec Engineer - Clojure & Cloud Security

Ladder; Maryland; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

Flexible PTO

Stock options

401k match (up to 4%)

Parental leave (10 weeks)

Remote work stipend & home-office aid

Job summary

Ladder is seeking an SecOps/AppSec Engineer (Clojure required) to own application security in our development lifecycles. You will actively review code, secure our JVM/Clojure stack, and monitor cloud posture while responding to incidents.

The role blends vulnerability management with governance, risk assessments, and secure defaults to scale with our growth. You will collaborate with backend engineers, participate in audits, and help build a robust, locked-down workspace.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on experience coding in Clojure and the JVM.
• Experience securing modern cloud infrastructures and incident response.
• Ability to read functional code and work with backend engineers on fixes.

Responsibilities

• Secure the Code by guiding application security vulnerability management with development teams.
• Security Ops: monitor cloud posture using SIEM/SOAR/CSP/CNAPP and respond to threats.
• Governance & Risk: perform security reviews and risk assessments on architecture, vendors, and APIs.
• Maintain workspace security including IAM, device compliance, and productivity tools.
• Mentor engineers on secure coding practices and secure defaults.

Skills

Clojure

TypeScript

JavaScript

JVM

Cloud security

Incident response

Security reviews

Kubernetes

Docker

GraphQL

Tools

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Kubernetes

Docker

Terraform

GraphQL

Job description

Ladder is seeking an SecOps/AppSec Engineer (Clojure required) to own application security in our development lifecycles. You will actively review code, secure our JVM/Clojure stack, and monitor cloud posture while responding to incidents.

The role blends vulnerability management with governance, risk assessments, and secure defaults to scale with our growth. You will collaborate with backend engineers, participate in audits, and help build a robust, locked-down workspace.