Remote AppSec & Risk Engineer (Clojure)

Ladder; Williamstown (NJ); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision

Flexible paid time off

Stock options

401k match up to 4%

Paid parental leave

Remote work stipend

Remote office stipend

Job summary

Ladder is seeking a SecOps/AppSec Engineer to be the driving force behind vulnerability management within development lifecycles. The role emphasizes Clojure-heavy backend code, cloud security operations, and a shift-left security approach across engineering teams.

You will monitor cloud infrastructure, assist with compliance audits, and ensure secure, scalable security practices across the organization while working in a remote setup across supported US states.

Qualifications

• 4+ years of software engineering and/or cybersecurity experience.
• Hands-on experience coding in Clojure and working in the JVM environment.
• Hands-on experience securing modern cloud infrastructures and incident response.

Responsibilities

• Secure the Code: Champion application security vulnerability management with development teams.
• Security Ops: Monitor cloud security posture using SIEM, SOAR, CSP, CNAPP to detect and respond in real time.
• Governance & Risk: Conduct security reviews and risk assessments with internal architecture, vendors, and APIs.
• Maintain and optimize day-to-day workspace security including IAM and device compliance.
• Mentor engineers on secure coding practices and secure defaults at scale.

Skills

Clojure programming

AppSec engineering

Cloud SecOps

Risk assessment

Education

Bachelor's in CS or related field

Tools

Kubernetes

Docker

Terraform

Datomic

Job description

Ladder is seeking a SecOps/AppSec Engineer to be the driving force behind vulnerability management within development lifecycles. The role emphasizes Clojure-heavy backend code, cloud security operations, and a shift-left security approach across engineering teams.

You will monitor cloud infrastructure, assist with compliance audits, and ensure secure, scalable security practices across the organization while working in a remote setup across supported US states.