Platform Engineer

Diverse Lynx, LLC; Des Moines (IA); Remote; USD 76,000 - 79,000; Full time

Job summary

Diverse Lynx LLC is seeking a Software Developer - Platform Engineer for a remote role focusing on proactive vulnerability remediation across Java/Spring Boot platform services. The position pays $55-$57 per hour and centers on disciplined upgrade work within CI/CD pipelines, with some Python work and AI-assisted tooling to speed cycles.

The role emphasizes security lifecycle management, cross-team collaboration with security and release teams, and maintaining compatibility across shared

Qualifications

• Proficient in Java 17/21 with Spring/Spring Boot and Maven.
• Experience with GitHub and Jenkins pipelines for CI/CD.
• Comfort with security-focused upgrade cycles and dependency management.

Responsibilities

• Remediate vulnerabilities across platform services on a twice-weekly cycle.
• Upgrade dependencies, including Maven BOMs and transitive deps.
• Analyze findings from Mythos and Snyk; assess severity and fix.
• Ensure upgrades do not cause regressions across builds and tests.
• Collaborate with security and release teams on SLAs.
• Occasionally patch Python dependencies in platform services.
• Leverage AI-assisted tooling to accelerate remediation workflows.

Skills

Java 17/21

Maven

Spring Boot

GitHub

Jenkins pipelines

Tools

AWS

Docker

Terraform

OpenSearch

Mythos

Snyk

Kiro

Job description

Job Title: Software Developer - Platform Engineer
Location: Remote
Pay Rate $55-$57/Hour
We're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting - it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.

What You'll Do

• Remediate library vulnerabilities across platform services on a twice-weekly cycle.
• Upgrade and manage dependencies, including Maven BOMs, parent POMs, and transitive dependencies.
• Analyze Mythos and Snyk findings, assess severity and impact, and apply fixes.
• Validate that upgrades don't introduce regressions through build, test, and deployment processes.
• Maintain compatibility across shared libraries consumed by multiple services.
• Work with AI-assisted remediation tooling to accelerate upgrade workflows.
• Coordinate with security and release teams on vulnerability SLAs.
• Occasionally remediate Python dependencies using pip and requirements.txt in platform services.

Required Skills

Primary (Must-Have)

• Java 17/21
• Maven
• Spring / Spring Boot
• GitHub
• Jenkins pipelines

Secondary

• Python 3.x
• pip / requirements.txt / Poetry
• React
• Node.js / NPM

Cloud & Infrastructure

• AWS (ECS, Lambda, IAM)
• Docker
• Terraform
• Git

AI & Automation

• AI-assisted coding tools (AWS Kiro or similar)
• Familiarity with LLM-driven workflows
• Automation mindset

Security & Compliance

• Software Composition Analysis (SCA) tools such as Mythos, Snyk, or similar
• Vulnerability lifecycle management
• CVSS scoring and risk assessment
• Compliance awareness

Nice to Have

• Strong experience with SDLC, DevOps, and CI/CD pipelines
• Experience managing upgrades at scale across 10+ microservices
• Familiarity with Apache Camel or integration-heavy Spring services
• Background in financial services or insurance, particularly in regulated environments
• Experience with OpenSearch or Elasticsearch library upgrades
• Familiarity with NestJS/Node.js, as some platform tooling uses these technologies3

Disclaimer: Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance. This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error, please disregard it and notify the sender. If you no longer wish to receive our communications, you may unsubscribe at any time.

Security Notice: Our official website is www.diverselynx.com We do not operate or authorize any other websites representing Diverse Lynx LLC.