Automation Engineer (AI - Driven Code Security & Remediation Framework)

Capgemini; New York (NY); Hybrid; USD 61,000 - 94,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Retirement benefits

Job summary

Tundra Technical Solutions is seeking an Automation Engineer to lead AI-driven remediation for code security. The role involves building agentic workflows, integrating scans into GitHub Actions and Jenkins, and operating testing across multi-repo, multi-language codebases in a hybrid New York setup.

Responsibilities include translating vulnerability data for leadership, generating patch PRs, and maintaining dashboards of coverage and MTTR.

Qualifications

• Strong Python automation and scripting for scanners and APIs.
• Experience with CI/CD pipelines and orchestration.
• Hands-on with security scanning tools and remediation workflows.

Responsibilities

• Build and operate a system that scans GitHub/Artifactory repos for vulnerabilities and uses AI-driven automation to remediate findings.
• Integrate scan-and-fix pipelines into GitHub Actions/Jenkins and test fixes in Docker containers.
• Summarize findings and track coverage and trends in dashboards.

Skills

Python

Bash

GitHub Actions

Jenkins

Artifactory/Xray

Snyk

CodeQL

Dependabot

Trivy

Semgrep

Airflow

Docker

Orchestration

CI/CD

Education

Tools

GitHub (Actions, Advanced Security, PR workflows)

JFrog Artifactory/Xray

Job description

Automation Engineer (AI - Driven Code Security & Remediation Framework) (Contract)

New York, NY, United States (Hybrid)

Contract (3 months 8 days)

Published 4 days ago

Python Automation

jenkins

integration testing

Agentic AI

GitHub Actions

Builds and operates a system that scans GitHub/Artifactory repos for vulnerabilities and EOL libraries, then uses AI-driven automation to remediate findings cutting manual triage and patch time firm-wide.

Core Technical Skills:

Programming: Strong Python (scanners, orchestration, API integration); basic Bash for CI/CD glue

Source & Artifact Systems: GitHub (Actions, Advanced Security, PR workflows) and JFrog Artifactory/Xray; ability to scale across multi-repo, multi-language codebases

Scanning Tools: Hands-on with Snyk, Xray, CodeQL / Dependabot, Trivy, or Semgrep; understanding of CVE/CVSS scoring and EOL-detection sources (e.g., endoflife.date)

AI-Driven Remediation: Building agentic workflows (LLM-based) that interpret findings, generate patch PRs, run tests, and summarize fixes; prompt engineering for code-editing agents

CI/CD & Orchestration: Integrating scan-and-fix pipelines into GitHub Actions/Jenkins; Docker for isolated fix-testing; scheduling via Airflow/cron

Reporting: Structuring findings (JSON/SQL) into dashboards for tracking coverage and trends

Supporting Skills:

Security fundamentals (injection, auth flaws, supply-chain/SBOM risk)

Risk-based prioritization beyond raw CVSS scores

Semantic versioning awareness for safe auto-upgrades

Communication Skills:

Translating vulnerability data into concise, risk-framed leadership updates (exposure counts, MTTR, fix-rate trends)

Writing clear status emails on scan coverage and outstanding critical items

Building the business case (time saved, risk reduced) for non-technical stakeholders

Tracking emerging agentic/AI remediation tools and evaluating fit before firm-wide adoption

The pay range that the employer in good faith reasonably expects to pay for this position is $43.92/hour - $68.62/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.

Tundra Technical Solutions is among North America’s leading providers of Staffing and Consulting Services. Our success and our clients’ success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.