Remote AppSec & Risk Engineer (Clojure)

Ladder; Minnesota; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Excellent medical, dental, and vision

Flexible paid time off

Stock options

401k match

Paid parental leave

Remote work with stipend

Monthly WFH stipend

Virtual events

Job summary

Ladder is seeking a SecOps/AppSec Engineer to drive application security within our development lifecycles. The role emphasizes vulnerability management across code and cloud environments, with hands-on Clojure in a JVM stack and collaboration with backend engineers.

As a remote role spanning 23 states, you’ll monitor cloud infrastructure, support compliance efforts, and help keep our workspace secure while enabling rapid, secure development. Equity and benefits are included.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on coding in Clojure and JVM familiarity.
• Cloud SecOps experience including incident response.

Responsibilities

• Secure the Code (Primary): Partner with development teams to champion application security vulnerability management.
• Security Ops: Configure, fine-tune, and monitor our cloud security posture using SIEM/SOAR/CSP tools to detect and respond to threats in real time.
• Champion Governance & Risk: Conduct security reviews and risk assessments on internal architecture, third-party vendors, and APIs to ensure risk tolerance and compliance.
• Maintain and optimize day-to-day corporate workspace security, including identity access management and device compliance.
• Mentor engineers on secure coding practices and establish secure defaults scalable with growth.

Skills

Security engineering

Clojure

JVM

Cloud security

Incident response

Code reviews

Education

Bachelor’s degree in Computer Science or Cyber Security

Tools

GCP

Kubernetes

Docker

Terraform

GraphQL

Google Security Command Center

Chronicle

Datomic

BigQuery

Kafka

Job description

Ladder is seeking a SecOps/AppSec Engineer to drive application security within our development lifecycles. The role emphasizes vulnerability management across code and cloud environments, with hands-on Clojure in a JVM stack and collaboration with backend engineers.

As a remote role spanning 23 states, you’ll monitor cloud infrastructure, support compliance efforts, and help keep our workspace secure while enabling rapid, secure development. Equity and benefits are included.