An Automation Engineer develops and implements testing strategies and toolsets with the goal of increasing process automation. Establishes appropriate measures to validate and report on software quality. Designs and implements test automation to improve system reliability and stability. Designs and supports frameworks for test infrastructure. Provides automation expertise and mentoring.
Permanent Full-Time Position Overview We are seeking an experienced Automation Lead to support the development of a dedicated vulnerability management and security automation practice within a large U.S. banking environment. This is a highly hands-on role focused on automating vulnerability remediation processes, building scalable DevSecOps automation pipelines , implementing policy-as-code , integrating enterprise security platforms, and enabling AI-driven vulnerability triage and remediation. The Automation Lead will work closely with Solution Architects, AI/ML Engineers, security teams, and execution teams to build and maintain automation frameworks across vulnerability intake, remediation, CI/CD security, reporting, and intelligent automation. Key Skills DevSecOps Automation Engineering Vulnerability Management Python Ansible Terraform Jenkins GitHub Actions CI/CD ServiceNow
Automation Vulnerability Triage Infrastructure Automation Automation Pipeline Development & Maintenance Build, maintain, and enhance runbooks for L1 and L2 vulnerability remediation . Automate OS patching, base image updates, SSL/TLS configuration, infrastructure configuration changes, and middleware updates. Develop Python-based automation for vulnerability intake, deduplication, normalization, and routing. Integrate vulnerability data from Archer, Tanium, Sysdig, SecurityCenter, and Imperva . Build and maintain integrations with Jenkins and GitHub Actions . Develop automated pull-request generation for container base image and library version updates. Build automated ServiceNow RITM generation , routing, and status tracking. Monitor automation pipelines and implement proactive alerting and self-healing mechanisms. Policy-as-Code & Security Automation Implement policy-as-code using OPA / Conftest or equivalent technologies. Build automated security policy enforcement and risk-based gating within CI/CD pipelines.
Develop security scanning integrations including:
SAST DAST SCA
Container scanning IaC scanning Secrets detection Build automated vulnerability feedback and retesting mechanisms. Implement compliance automation and audit-ready evidence generation. AI & Intelligent Automation Integrate vulnerability feeds with a LangChain-based AI triage and scoring engine . Build vulnerability deduplication and normalization across multiple security platforms. Develop automated vulnerability routing based on risk score, asset criticality, and remediation pathway. Build AI co-pilot integrations for automated L3 simple-fix PR generation . Develop Python-based AI agent pipelines using LangChain and Azure OpenAI . Build feedback loops to improve AI triage accuracy using remediation closure data. Reporting & Dashboard Development Build and maintain an Archer-based SLA compliance dashboard . Track vulnerability status, MTTR, backlog burn-down, severity, and remediation progress. Develop automated weekly SLA burn-down reports and monthly executive summaries. Build Jira-based tracking and workflow integrations. Develop data pipelines integrating Archer, ServiceNow, Jira, and vulnerability scanning platforms . Build operational dashboards for automation efficiency, runbook execution rates, PR throughput, and AI triage accuracy. Continuous Improvement Identify recurring manual processes suitable for automation. Monitor and optimize runbook execution performance. Improve automation throughput and reduce failure rates. Provide technical recommendations for continuous improvement of the automation framework. Document automation scripts, runbooks, and integration patterns in Confluence . Support knowledge transfer and adoption of new automation capabilities. Required Qualifications 8+ years of hands-on experience in DevSecOps, automation engineering, or infrastructure automation. Strong hands-on Python scripting experience. Strong Ansible and Terraform experience. Experience building automation scripts, API integrations, and data pipelines. Hands-on Jenkins and GitHub Actions experience, including pipeline development, maintenance, and troubleshooting. Production experience with at least two security scanning areas :
SAST DAST SCA
Container scanning IaC scanning Strong ServiceNow
REST API
integration experience. Experience automating ITSM workflows, RITM creation, routing, and status tracking . Strong Docker and container operations experience. Experience with base image management, Dockerfile optimization, and container security scanning. Hands-on OPA / Conftest or equivalent policy-as-code experience. Experience with vulnerability management or GRC platforms such as Archer, Qualys, or Tenable . Strong
REST API
development and integration experience. Strong Jira administration and workflow automation experience. Excellent verbal and written communication skills. Strong technical documentation and analytical skills. Strong attention to detail.
