Remote AppSec & Risk Engineer (Clojure Focus)

Ladder; Central City (CO); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical benefits

Flexible PTO

Stock options

401k match

Parental leave

Remote work stipend

Job summary

Ladder is hiring a SecOps/AppSec Engineer to embed security in development lifecycles. You will own application security vulnerability management, work with engineering teams on code-level fixes in a JVM/Clojure stack, and strengthen shift-left security practices across our backend services.

You will also monitor cloud infrastructure, perform security risk reviews, support compliance audits, and ensure IAM and device security remain robust yet frictionless for the team.

Qualifications

• 4+ years in software engineering or cybersecurity.
• Hands-on Clojure coding and JVM experience.
• Experience securing cloud infrastructure and incident response.
• Ability to perform security reviews and risk assessments.
• Mentor engineers on secure coding practices.

Responsibilities

• Champion application security vulnerability management within development lifecycles.
• Configure, fine-tune, and monitor cloud security posture using SIEM/SOAR/CSP/CNAPP.
• Conduct security reviews on internal architecture, vendors, and APIs for risk alignment.
• Maintain identity access management and device security with minimal friction.
• Mentor engineers on secure coding practices and secure defaults.

Skills

Vulnerability management

Cloud security

Incident response

Secure coding practices

Risk assessment

Leadership

JVM/Clojure

Tools

Clojure

JVM

TypeScript

JavaScript

GCP

Kubernetes

Docker

Terraform

GraphQL

BigQuery

Kafka

Chronicle

Datomic

Security Command Center

Job description

Ladder is hiring a SecOps/AppSec Engineer to embed security in development lifecycles. You will own application security vulnerability management, work with engineering teams on code-level fixes in a JVM/Clojure stack, and strengthen shift-left security practices across our backend services.

You will also monitor cloud infrastructure, perform security risk reviews, support compliance audits, and ensure IAM and device security remain robust yet frictionless for the team.