Application Security Automation Engineer

ManpowerGroup Global, Inc.; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work environment

Professional growth opportunities

Diversity & inclusion

Job summary

ManpowerGroup Global, Inc. in New York, NY is seeking an Application Security Automation Engineer to design and operate AI-powered security automation across repositories and CI/CD pipelines.

You will integrate tools like Snyk, CodeQL, Trivy, and Semgrep, build AI-guided remediation workflows, and create dashboards for leadership while collaborating with developers in a hybrid, flexible culture.

Qualifications

• 7+ years of application security, automation, or related fields.
• Proficiency in Python programming and API integration.
• Hands-on experience with GitHub and Artifactory/Xray.
• Familiarity with Snyk, Xray, CodeQL, Dependabot, Trivy, Semgrep.
• Experience building AI-driven workflows for remediation.

Responsibilities

• Develop and operate security automation to scan repositories for vulnerabilities and outdated libraries.
• Integrate security scanning tools into CI/CD pipelines for continuous monitoring.
• Build agentic workflows to interpret findings, generate patches, run tests, and summarize fixes with LLMs.
• Collaborate with development teams to embed automation into existing workflows.
• Create dashboards and reports to visualize vulnerability trends and remediation effectiveness.

Skills

Application security

Automation

Python

CI/CD pipelines

GitHub/JFrog Artifactory/Xray

Snyk/Xray/CodeQL

AI-driven remediation

Tools

GitHub

JFrog Artifactory

Xray

Job description

Our client, a leading organization in the technology and security sector, is seeking a passionate and skilled Application Security Automation Engineer to join their dynamic team. As an Application Security Automation Engineer, you will be instrumental in enhancing security measures through innovative automation solutions, supporting the Security Operations and Development teams. The ideal candidate will demonstrate strong problem-solving skills, adaptability, and a proactive mindset, which will align successfully within the organization.

Job Title:Application Security Automation Engineer

Location:New York, NY / Hybrid

Pay Range:

What’s the Job?

• Develop and operate systems that scan repositories for vulnerabilities and outdated libraries, utilizing AI‑driven automation to streamline remediation processes.
• Integrate security scanning tools such as Snyk, Xray, CodeQL, Dependabot, Trivy, or Semgrep into CI/CD pipelines to ensure continuous security monitoring.
• Build agentic workflows that interpret findings, generate patch pull requests, run tests, and summarize fixes using large language models (LLMs).
• Collaborate with development teams to embed security automation into existing workflows, ensuring minimal manual intervention.
• Create dashboards and reports to visualize vulnerability trends, coverage, and remediation effectiveness for leadership and technical teams.

What’s Needed?

• 7+ years of experience in application security, automation, or related fields.
• Proficiency in Python programming, with experience in scripting and API integration; basic Bash scripting for CI/CD workflows.
• Hands‑on experience with source and artifact management systems such as GitHub and JFrog Artifactory/Xray.
• Familiarity with security scanning tools like Snyk, Xray, CodeQL, Dependabot, Trivy, or Semgrep, and understanding of CVE/CVSS scoring and EOL sources.
• Experience in building AI‑driven workflows for vulnerability remediation, including prompt engineering for code‑editing agents.

What’s in it for me?

• Opportunity to work on cutting‑edge security automation projects that impact the entire organization.
• Collaborate with a talented and innovative team committed to continuous learning and improvement.
• Engage in a hybrid work environment that promotes work‑life balance and flexibility.
• Contribute to a culture that values diversity, inclusion, and professional growth.
• Be part of a forward‑thinking organization dedicated to leveraging technology for security excellence.