Remote AppSec & Risk Engineer (Clojure)

Ladder; Iowa Center (IA); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

Flexible PTO

Stock options

4% 401k match

Paid parental leave

Remote work stipend

Remote office stipend

Job summary

Ladder is hiring a SecOps/AppSec Engineer to lead vulnerability management across development lifecycles and bolster security in a heavily Clojure-based backend. You’ll partner with engineering teams, review code, and strengthen shift-left security while also monitoring cloud infrastructure and supporting audits.

Ideal candidates have 4+ years in security or software engineering, hands-on Clojure/JVM experience, and a background in cloud security operations and incident response.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on coding in Clojure and JVM environment; reading functional code and fixes.
• Experience securing modern cloud infrastructures and incident response.

Responsibilities

• Secure the Code: champion application security vulnerability management with development teams.
• Security Ops: monitor cloud security posture using SIEM/SOAR/CSP/CNAPP to detect threats.
• Governance & Risk: perform security reviews and risk assessments of architecture, vendors and APIs.
• Maintain corporate workspace security incl. IAM, device compliance, productivity tools.
• Mentor engineers on secure coding practices and safe defaults.

Skills

Security engineering

AppSec

Vulnerability management

Cloud security

Education

BS/BA CS or Cyber Security

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is hiring a SecOps/AppSec Engineer to lead vulnerability management across development lifecycles and bolster security in a heavily Clojure-based backend. You’ll partner with engineering teams, review code, and strengthen shift-left security while also monitoring cloud infrastructure and supporting audits.

Ideal candidates have 4+ years in security or software engineering, hands-on Clojure/JVM experience, and a background in cloud security operations and incident response.