Remote AppSec Engineer (JVM/Clojure)

Ladder; Iowa City (IA); Remote; USD 109,000 - 130,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k match

Remote work support

Remote office stipend

Wellness stipend

Paid parental leave

Remote-friendly culture

Job summary

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle within our development lifecycles. You will work with backend engineers in a heavy Clojure JVM environment, strengthening shift-left security and actively reviewing code for secure fixes.

You will also monitor cloud security posture, perform risk assessments, and support audits while mentoring teams in secure coding practices in a fast-paced, distributed setup.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on working within the JVM environment and reading functional code.
• Hands-on experience securing modern cloud infrastructures and incident response.
• Ability to thrive in dynamic, scalable environments and communicate with management and auditors.

Responsibilities

• Secure the Code (Primary): champion application security vulnerability management with development teams.
• Security Ops: monitor cloud security posture using SIEM, SOAR, CSP, CNAPP.
• Governance & Risk: conduct security reviews and risk assessments for internal and external vendors.
• Protect the Workspace: ensure IAM, device compliance, and secure productivity tools.
• Drive Technical Excellence: mentor engineers on secure coding practices and secure defaults.

Skills

4+ years software engineering

4+ years cybersecurity

JVM experience

Cloud SecOps

Autonomous thinking

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking an Applications Security Engineer to own the vulnerability management lifecycle within our development lifecycles. You will work with backend engineers in a heavy Clojure JVM environment, strengthening shift-left security and actively reviewing code for secure fixes.

You will also monitor cloud security posture, perform risk assessments, and support audits while mentoring teams in secure coding practices in a fast-paced, distributed setup.