Application Security Platform Engineer; AI

A leading enterprise organization is seeking an Application Security Platform Engineer to help scale and automate application security practices across modern software delivery platforms. This role is ideal for an engineer with a strong background in software development, Dev Sec Ops , platform engineering, and automation who is passionate about building security controls directly into CI/CD workflows.

The successful candidate will work closely with security, infrastructure, platform, and development teams to improve vulnerability management processes, automate security assessments, and develop reusable platform components that enable secure software delivery at scale.

Responsibilities

• Design and develop custom containerized solutions that collect results from security assessment tools, validate findings using custom logic, and generate actionable reports.
• Build and package application security assessment workflows as reusable CI/CD components and containerized scheduled jobs.
• Develop normalization services for security findings, creating stable identifiers that preserve suppression workflows and historical trend analysis across rescans.
• Design and implement security gating policies based on vulnerability severity, confidence levels, baseline comparisons, and exception management processes.
• Create and maintain CI/CD rules that enforce application security controls and prevent regressions against established security requirements.
• Develop and operate reporting, metrics, and dashboarding solutions that provide visibility into application security posture and vulnerability trends.
• Build and maintain benchmark-based drift detection capabilities to identify deviations from established security standards.
• Partner with engineering, infrastructure, and platform teams to define integration points, drive adoption, and collect stakeholder feedback.
• Create meaningful security metrics and key performance indicators (KPIs) to measure program effectiveness and risk reduction efforts.
• Gain a deep understanding of existing platform architecture, integrations, and security tooling to support continuous improvement initiatives.

Minimum Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Security, or equivalent practical experience.
• 5+ years of experience building and supporting CI/CD platforms, developer tooling, or platform engineering solutions at enterprise scale.
• Hands-on experience integrating application security tooling such as SAST, DAST, SCA, or similar technologies into software delivery pipelines.
• Experience implementing security workflows including baseline suppression, false-positive management, vulnerability triage, and deployment gating.
• Experience working with containerized environments and policy-as-code solutions.
• Strong understanding of application security concepts, vulnerability assessment methodologies, and security risk evaluation.
• Experience supporting environments with audit, compliance, or change-management requirements.
• Excellent problem-solving, communication, and cross-functional collaboration skills.

Preferred Qualifications

• Experience working with AI-powered, agentic, or LLM-based automation solutions, including prompt orchestration, workflow automation, output validation, and management of non-deterministic systems.
• Familiarity with enterprise vulnerability management platforms and security operations workflows.
• Ability to read, analyze, and troubleshoot Java and Type Script codebases.
• Experience working within regulated industries such as financial services, healthcare, or critical infrastructure.
• Experience with Jenkins Shared Libraries, Helm, and related Dev Ops tooling.
• Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform.
• Experience deploying and managing solutions on cloud platforms, including AWS or comparable environments.
• Java development experience, including frameworks and technologies such as Spring and Java Servlets.