Application Security Engineer

Application Security Engineer Cloud Engineering/DevOps

Join a dynamic application security team focused on building and maturing security programs within a fast-paced, collaborative environment. This role involves supporting secure development practices, security operations, and architecture collaboration to embed security into the software development lifecycle.

Key Responsibilities

• Lead the discovery and inventory of applications across all business units, including ownership mapping, technology stack profiling, and risk tiering.
• Design and implement AI-assisted triage workflows on application security tooling to optimize findings and reduce developer overload.
• Configure and operate application security tools such as SAST, SCA, and WAF technologies, integrating them into CI/CD pipelines.
• Collaborate with development teams to onboard applications, analyze security data, and support the creation of security standards, guidelines, and policies.
• Assist in building and maintaining the organization's application inventory and security architecture.
• Define secure SDLC requirements, threat modeling practices, and security gates adopted by development teams.
• Evaluate emerging AI security tools and recommend operational strategies.
• Produce executive-level metrics and reports that connect application security activities to overall business risk reduction.

Required Qualifications

• 7+ years in application security, product security, or security engineering.
• Hands-on experience with SAST/SCA tooling such as Tenable, Snyk, or similar.
• Proficiency in at least three programming languages (e.g., Python, JavaScript/TypeScript, Java, C#, Go) for reading, reviewing, and triaging findings.
• Strong scripting and automation skills, including building integrations with REST APIs and CI/CD tools like GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
• Experience with secure coding practices, secure development lifecycle, and application architecture.
• Knowledge of cloud security principles and practices.
• Ability to influence engineering teams without direct authority and communicate security concepts effectively to technical and non-technical stakeholders.

Preferred Qualifications

• Experience integrating LLM-based tools into security workflows.
• Familiarity with compliance frameworks such as HITRUST, HIPAA, NIST AI RMF, or SOC 2.
• Prior work in regulated or healthcare-adjacent environments.
• Cloud security expertise in AWS, Azure, or GCP.
• Contributions to open-source security projects or community events.

About Delphi-US - Peacemakers in the Talent War Delphi-US is a national IT Services firm based in Newport, Rhode Island. Delphi attracts our nation's best and brightest Technical & Professional Talent and positions our nation's finest employers to further their competitive advantages. Delphi's core technical focus includes Data Intelligence Engineering & Analytics, AI/ML Operational Excellence, DevOps & Cloud Computing, Health IT & Life Sciences, and Energy Management/Power Systems; serving domains from sensitive national energy sectors to critical financial services, biomed, life sciences & pharma, major government & municipal institutions, and much of the USA's Fortune 500 corporations. Delphi Associates are deployed on critical IT Projects where their consultative business acumen, comprehensive technical expertise, and committed service mission drives our client's success. Our proprietary skill-based and cultural matching process results in higher qualified project teams, custom curated for our client's specific technical & functional goals. We are supremely experienced, friendly, professional, and ready to advocate on your behalf. Delphi has an indelible understanding of employer expectations, a track record of project success and we deliver lasting results.