SecOps/AppSec Engineer (Clojure Required)

Ladder

8d • $109,000 - $144,000 • Remote

About The Position

Ladder is hiring a remote SecOps/AppSec Engineer to lead application security vulnerability management and support security operations, risk management, and compliance. The position is embedded in development lifecycles, with a focus on securing a high-scale Clojure backend by reviewing code, triaging vulnerabilities, and helping engineers implement fixes. The role also covers cloud security monitoring and incident response, security reviews and risk assessments, audit support, and corporate workspace security.

The successful candidate will work across engineering and other teams, advise on secure coding, establish secure defaults, and make practical security decisions that can scale with the company. The role calls for an organized, self-motivated professional with strong problem-solving and writing skills who can operate in a fast-paced environment and communicate with management and external auditors.

This is a remote role based in one of Ladder’s listed hiring states, subject to location exclusions. Ladder is not currently sponsoring or transferring OPT or H-1B visas. The role has a stated base salary range of $109,000–$130,000 for Tier 2 and Tier 3 locations, or $122,000–$144,000 for Tier 1 locations, and is also eligible for equity and benefits.

Requirements

• At least 4 years of software engineering and/or cybersecurity experience.
• A strong foundation in computer science, cybersecurity, or a related field.
• Hands-on experience coding in Clojure and working in the JVM environment.
• Ability to read functional code, understand immutable data structures, and collaborate with backend engineers on code-level fixes.
• Hands-on experience securing modern cloud infrastructure and experience with incident response.
• Baseline security certification such as CompTIA Security+ or an equivalent.
• Ability to work autonomously, investigate root causes, and develop security frameworks that prevent classes of vulnerabilities.
• Strong organization, self-motivation, problem-solving, writing, and collaboration skills.

Nice To Haves

• CISSP or another advanced security credential; CISSP is identified as highly preferred.
• Experience with the listed technologies: TypeScript, JavaScript, GCP, Kubernetes, Docker, Terraform, GraphQL, Google Security Command Center, Chronicle, Datomic, BigQuery, and Kafka.

Responsibilities

• Partner with development teams to manage application security vulnerabilities in a high-scale Clojure ecosystem, triage findings, and assist with remediation code fixes.
• Configure, fine-tune, and monitor cloud security using security operations tools to detect and respond to threats.
• Conduct security reviews and risk assessments of internal architecture, third-party vendors, and APIs.
• Maintain corporate workspace security, including identity and access management, device compliance, and productivity tools.
• Advocate for security across teams, mentor engineers on secure coding practices, establish secure defaults, and make scalable risk decisions.
• Support compliance audits and day-to-day security operations.

Benefits

• Medical, dental, and vision coverage for employees and families.
• Flexible paid time off and a week-long winter holiday closure.
• Stock options.
• 401(k) match of up to 4% of contributions.
• Monthly wellness-related stipend through the Ladder Fit Program.
• Ten weeks of paid parental leave for parents, including birthing, adoptive, and foster parents.
• Remote work flexibility, a one-time remote office stipend, and a monthly stipend for work-from-home costs such as internet.
• Virtual company-wide events.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed