Senior Automation Engineer

About the role

Builds and operates a system that scans repos for vulnerabilities and EOL libraries, then uses AI-driven automation to remediate findings - cutting manual triage and patch time firm-wide.

Tasks

• Build AI-driven, agentic workflows using LLMs for automated vulnerability remediation.
• Develop Python-based scanners, orchestration workflows, and API integrations.
• Integrate security scanning and remediation pipelines with GitHub Actions/Jenkins.
• Work with GitHub Advanced Security, JFrog Artifactory/Xray, and security scanning tools.
• Automate patch generation, testing, pull requests, and remediation reporting.
• Prioritize vulnerabilities based on risk, CVE/CVSS scores, and business impact.
• Track remediation progress, security coverage, and MTTR trends.
• Communicate technical findings and remediation status to business stakeholders.

Requirements

• Strong Python programming and basic Bash scripting.
• GitHub Actions, GitHub Advanced Security, and pull request workflows.
• JFrog Artifactory/Xray.
• Hands-on experience with tools such as Snyk, CodeQL, Dependabot, Trivy, or Semgrep.
• AI/LLM-based agentic workflows and prompt engineering for code-editing agents.
• CI/CD automation, Docker, Jenkins, and Airflow/cron.
• Vulnerability management, CVE/CVSS scoring, EOL detection, and regression testing.
• Experience working across multiple repositories and programming languages.
• 8–10+ years of overall experience, including at least 3 years of relevant AI-driven automation for code scanning and remediation.
• Local candidates only

Schedule

• 12 Months
• Hybrid - 3 days onsite is mandatory

How to apply

• Share your updated resume by email.

Location

• New York City, NY