Position: Sr. DevSecOps Automation Engineer (AI-Driven Remediation)
Location: NYC, NY (3 days onsite is must )
Duration: 12 Months
Role: Automation Engineer AI-Driven Code Security & Remediation Framework
Senior DevSecOps Engineer (AI-Driven Remediation) OR Senior Application Security Engineer (AI/ML)
Key Ask: related to vulnerability, security and application of AI for detection and remediation experience is required Experience with ML/Deep Learning.
Key Skills
AI & Machine Learning (Core Differentiator)
AI-Driven Remediation: Building LLM-based agentic workflows to interpret security findings and generate code patches.
Prompt Engineering: Specifically for code-editing agents.
Machine Learning / Deep Learning: Applied specifically to vulnerability detection and remediation.
Tool Evaluation: Tracking and assessing emerging agentic/AI remediation tools.
Application Security & Vulnerability Management
Vulnerability Scanning & Triage (CVE/CVSS scoring).
End-of-Life (EOL) Library Detection.
Supply Chain Security & SBOM (Software Bill of Materials) risk awareness.
Risk-Based Prioritization (looking beyond raw CVSS scores).
Security Fundamentals (injection flaws, authentication vulnerabilities).
Security Scanning & DevSecOps Tools
SCA/SAST Tools: Snyk, JFrog Xray, CodeQL, Dependabot, Trivy, Semgrep.
Source & Artifact Management: GitHub (Advanced Security, PR workflows), JFrog Artifactory.
CI/CD Pipelines: GitHub Actions, Jenkins.
Containerization: Docker (for isolated fix-testing).
Software Engineering & Orchestration
Programming: Expert-level Python (building scanners, orchestration, API integrations).
Scripting: Bash (for CI/CD glue).
Workflow Orchestration: Apache Airflow, Cron.
Versioning: Semantic versioning awareness for safe auto-upgrades.
Data Formatting: JSON, SQL (for structuring findings and building dashboards).
Testing & Validation
Regression validation/testing before auto-merging PRs.
Multi-repo and multi-language codebase scaling.
Mandatory Experience Constraints (Must-Haves)
Total Experience: 6 to 10+ years (Advanced to Expert level).
Specialized Experience: Minimum of 3 years specifically in AI-driven automation for code scanning and remediation.
Location: Must be able to work 3 days onsite in NYC, NY.