Application Security Platform Engineer

Application Security Platform Engineer | Location: Hybrid in Chicago or Dallas | Contract | Hourly Pay Range: $80-$80

Seeking an experienced Application Security Platform Engineer with a strong development and automation background to support scaling efforts in vulnerability identification, assessment, and tracking. This role involves deep system understanding, automation, and integration of security tools within CI/CD pipelines to enhance application security processes.

Key Responsibilities

• Develop custom Docker containers to extract and verify vulnerability management results, generating comprehensive reports.
• Package and automate the application security assessment pipeline as reusable CI components and containerized scheduled jobs.
• Build a results normalizer for security findings to ensure stable identifiers, supporting trend analysis and suppression workflows.
• Design and tune security gating policies based on severity, confidence thresholds, and baseline differences to foster developer trust.
• Author CI rules that enforce platform security controls, prevent regressions, and align with security requirements.
• Establish metrics and dashboards for program-level security posture reporting.
• Build and operate drift-detection jobs based on benchmarking security findings.
• Collaborate with platform, infrastructure, and development teams to integrate security workflows and gather feedback.
• Develop metrics to measure security posture and vulnerability trends over time.
  
  

Required Qualifications

• 5+ years of experience building CI/CD and developer platform tooling at scale.
• Hands-on experience integrating application security tools (SAST, DAST, SCA, or similar) into delivery pipelines, including suppression workflows, false-positive management, and merge gating.
• Proficiency in scripting languages such as Python, Java, and JavaScript.
• Working knowledge of containerized deployment and policy-as-code (e.g., Kubernetes admission control).
• Ability to critically analyze vulnerability reports, tune confidence thresholds, and challenge automated verdicts.
• Experience operating within change-control and audit-evidence environments.
  
  

Preferred Qualifications

• Experience with LLM-based or agentic tooling, handling non-determinism, output validation, and workflow orchestration.
• Familiarity with enterprise vulnerability management platforms.
• Fluency in Java and TypeScript codebases.
• Background in regulated industries such as financial services, healthcare, or critical infrastructure.
• Experience with Jenkins shared libraries, Helm, Terraform, and cloud platforms like AWS.
• Java programming experience, including Java Servlets and Spring framework.
  
  

About Delphi-US - Peacemakers In The Talent War

Delphi-US is a national IT services firm based in Newport, Rhode Island. We attract top-tier technical and professional talent, positioning leading employers to gain competitive advantages. Our core focus areas include Data Intelligence, AI/ML, DevOps & Cloud, Health IT & Life Sciences, and Energy Management. We deploy our skilled professionals on critical projects, leveraging a proprietary matching process to ensure high-quality, goal-aligned teams. With extensive experience and a client-centric approach, we deliver lasting results and advocate on your behalf.

6235