Automation Lead

System One, Inc.; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health and welfare benefits

Medical

Dental

Vision

Spending accounts

Life insurance

Voluntary plans

401(k) plan

Job summary

System One, Inc. seeks an Automation Lead to drive DevSecOps and vulnerability management automation within a large U.S. banking environment. You will design and maintain automation pipelines, ingestion and triage of vulnerabilities, and policy-as-code across CI/CD stacks.

You will integrate security scanners, ITSM workflows, and AI-assisted triage, delivering proactive alerts, dashboards, and audit-ready evidence while coordinating with architects, security teams, and execution teams.

Qualifications

• 8+ years of hands-on DevSecOps, automation engineering, or infrastructure automation.
• Strong Python scripting experience.
• Strong Ansible and Terraform experience.
• Experience building automation scripts, API integrations, and data pipelines.
• Hands-on Jenkins and GitHub Actions experience, including pipeline development, maintenance, and troubleshooting.
• Production experience with SAST, DAST, SCA, container scanning, and IaC scanning.
• Strong ServiceNow REST API integration experience.
• Experience automating ITSM workflows, RITM creation, routing, and status tracking.
• Strong Docker and container operations experience.
• Hands-on policy-as-code (OPA/Conftest) experience.
• Experience with Archer, Qualys, or Tenable for vulnerability management.
• REST API development and integration; Jira workflow automation.

Responsibilities

• Build and maintain automation frameworks across vulnerability intake, remediation, CI/CD security, reporting, and intelligent automation.
• Automate vulnerability remediation including OS patching, base image updates, SSL/TLS changes, and infrastructure updates.
• Develop Python automation for intake, deduplication, normalization, and routing of vulnerability data.
• Integrate vulnerability data from Archer, Tanium, Sysdig, SecurityCenter, and Imperva.
• Build and maintain integrations with Jenkins and GitHub Actions; automate PRs for container base images and libraries.
• Create automated ServiceNow RITM generation, routing, and status tracking.
• Monitor pipelines with proactive alerting and self-healing mechanisms.
• Implement policy-as-code using OPA/Conftest; enforce security gates in CI/CD.
• Develop security scanning integrations (SAST/DAST/SCA, container, IaC, secrets).
• Enable AI-driven triage and automated routing using LangChain and Azure OpenAI.
• Develop dashboards and data pipelines combining Archer, ServiceNow, Jira, and scanners.

Skills

DevSecOps

Automation Engineering

Vulnerability Management

Python

Ansible

Terraform

Jenkins

GitHub Actions

CI/CD

REST APIs

LangChain

Azure OpenAI

AI/ML Automation

Vulnerability Triage

Infrastructure Automation

Runbooks

OS Patch Automation

Tools

ServiceNow REST API

Archer

Qualys

Tenable

Tanium

Sysdig

SecurityCenter

Imperva

Jira

Docker

OPA / Conftest

Azure OpenAI

Job description

Automation Lead – DevSecOps & Vulnerability Management

Job ID: J0526-2181

Location: Cleveland, OH / Pittsburgh, PA / Dallas, TX

Work Model: Onsite at Client Site

Employment Type: Permanent Full-Time

Position Overview

We are seeking an experienced Automation Lead to support the development of a dedicated vulnerability management and security automation practice within a large U.S. banking environment.

This is a highly hands‑on role focused on automating vulnerability remediation processes, building scalable DevSecOps automation pipelines, implementing policy‑as‑code, integrating enterprise security platforms, and enabling AI‑driven vulnerability triage and remediation.

The Automation Lead will work closely with Solution Architects, AI/ML Engineers, security teams, and execution teams to build and maintain automation frameworks across vulnerability intake, remediation, CI/CD security, reporting, and intelligent automation.

Key Skills

• DevSecOps
• Automation Engineering
• Vulnerability Management
• Python
• Ansible
• Terraform
• Jenkins
• GitHub Actions
• CI/CD
• ServiceNow REST API
• RITM Automation
• Docker
• Container Security
• OPA / Conftest
• Policy-as-Code
• SAST / DAST / SCA
• Container Scanning
• IaC Scanning
• REST APIs
• Archer
• Qualys / Tenable
• Tanium
• Sysdig
• SecurityCenter
• Imperva
• Jira
• LangChain
• Azure OpenAI
• AI/ML Automation
• Vulnerability Triage
• Infrastructure Automation
• Automation Pipeline Development & Maintenance
• Build, maintain, and enhance runbooks for L1 and L2 vulnerability remediation.
• Automate OS patching, base image updates, SSL/TLS configuration, infrastructure configuration changes, and middleware updates.
• Develop Python-based automation for vulnerability intake, deduplication, normalization, and routing.
• Integrate vulnerability data from Archer, Tanium, Sysdig, SecurityCenter, and Imperva.
• Build and maintain integrations with Jenkins and GitHub Actions.
• Develop automated pull-request generation for container base image and library version updates.
• Build automated ServiceNow RITM generation, routing, and status tracking.
• Monitor automation pipelines and implement proactive alerting and self‑healing mechanisms.
• Policy-as-Code & Security Automation
• Implement policy‑as‑code using OPA / Conftest or equivalent technologies.
• Build automated security policy enforcement and risk‑based gating within CI/CD pipelines.
• Develop security scanning integrations including:
• SAST
• DAST
• SCA
• Container scanning
• IaC scanning
• Secrets detection
• Build automated vulnerability feedback and retesting mechanisms.
• Implement compliance automation and audit‑ready evidence generation.
• AI & Intelligent Automation
• Integrate vulnerability feeds with a LangChain‑based AI triage and scoring engine.
• Build vulnerability deduplication and normalization across multiple security platforms.
• Develop automated vulnerability routing based on risk score, asset criticality, and remediation pathway.
• Build AI co‑pilot integrations for automated L3 simple‑fix PR generation.
• Develop Python‑based AI agent pipelines using LangChain and Azure OpenAI.
• Build feedback loops to improve AI triage accuracy using remediation closure data.
• Reporting & Dashboard Development
• Build and maintain an Archer‑based SLA compliance dashboard.
• Track vulnerability status, MTTR, backlog burn‑down, severity, and remediation progress.
• Develop automated weekly SLA burn‑down reports and monthly executive summaries.
• Build Jira‑based tracking and workflow integrations.
• Develop data pipelines integrating Archer, ServiceNow, Jira, and vulnerability scanning platforms.
• Build operational dashboards for automation efficiency, runbook execution rates, PR throughput, and AI triage accuracy.
• Continuous Improvement
• Identify recurring manual processes suitable for automation.
• Monitor and optimize runbook execution performance.
• Improve automation throughput and reduce failure rates.
• Provide technical recommendations for continuous improvement of the automation framework.
• Document automation scripts, runbooks, and integration patterns in Confluence.
• Support knowledge transfer and adoption of new automation capabilities.

Required Qualifications

• 8+ years of hands‑on experience in DevSecOps, automation engineering, or infrastructure automation.
• Strong hands‑on Python scripting experience.
• Strong Ansible and Terraform experience.
• Experience building automation scripts, API integrations, and data pipelines.
• Hands‑on Jenkins and GitHub Actions experience, including pipeline development, maintenance, and troubleshooting.
• Production experience with at least two security scanning areas:
• SAST
• DAST
• SCA
• Container scanning
• IaC scanning
• Strong ServiceNow REST API integration experience.
• Experience automating ITSM workflows, RITM creation, routing, and status tracking.
• Strong Docker and container operations experience.
• Experience with base image management, Dockerfile optimization, and container security scanning.
• Hands‑on OPA / Conftest or equivalent policy‑as‑code experience.
• Experience with vulnerability management or GRC platforms such as Archer, Qualys, or Tenable.
• Strong REST API development and integration experience.
• Strong Jira administration and workflow automation experience.
• Excellent verbal and written communication skills.
• Strong technical documentation and analytical skills.
• Strong attention to detail.

Preferred / Valuable Experience

• Vulnerability remediation automation
• AI‑driven vulnerability triage
• LangChain
• Azure OpenAI
• AI agents / intelligent automation
• Security orchestration
• AIOps
• Banking or financial‑services environments
• Vulnerability SLA management
• Compliance automation
• Automated PR generation
• Multi‑platform vulnerability normalization and deduplication
• #M1
• #DI-CB2
• #L1 - KB1
• Ref: #404-IT Pittsburgh

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full‑time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

• Health
• Welfare benefits
• Medical
• Dental
• Vision
• Spending accounts
• Life insurance
• Voluntary plans
• Participation in a 401(k) plan

Equal Opportunity Employer Statement

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.