Unknown Company

Automation Lead

Apply Now Save
pittsburgh, pa • Posted 1 weeks ago
Onsite Full Time Architecture and Engineering Occupations
Automation Lead – DevSecOps & Vulnerability Management

We are seeking an experienced Automation Lead to support the development of a dedicated vulnerability management and security automation practice within a large U.S. banking environment. This is a highly hands-on role focused on automating vulnerability remediation processes, building scalable DevSecOps automation pipelines, implementing policy-as-code, integrating enterprise security platforms, and enabling AI-driven vulnerability triage and remediation.

The Automation Lead will work closely with Solution Architects, AI/ML Engineers, security teams, and execution teams to build and maintain automation frameworks across vulnerability intake, remediation, CI/CD security, reporting, and intelligent automation.

Key Skills
  • DevSecOps
  • Automation Engineering
  • Vulnerability Management
  • Python
  • Ansible
  • Terraform
  • Jenkins
  • GitHub Actions
  • CI/CD
  • ServiceNow REST API
  • RITM Automation
  • Docker
  • Container Security
  • OPA / Conftest
  • Policy-as-Code
  • SAST / DAST / SCA
  • Container Scanning
  • IaC Scanning
  • REST APIs
  • Archer
  • Qualys / Tenable
  • Tanium
  • Sysdig
  • SecurityCenter
  • Imperva
  • Jira
  • LangChain
  • Azure OpenAI
  • AI/ML Automation
  • Vulnerability Triage
  • Infrastructure Automation
Automation Pipeline Development & Maintenance
  • Build, maintain, and enhance runbooks for L1 and L2 vulnerability remediation.
  • Automate OS patching, base image updates, SSL/TLS configuration, infrastructure configuration changes, and middleware updates.
  • Develop Python-based automation for vulnerability intake, deduplication, normalization, and routing.
  • Integrate vulnerability data from Archer, Tanium, Sysdig, SecurityCenter, and Imperva.
  • Build and maintain integrations with Jenkins and GitHub Actions.
  • Develop automated pull-request generation for container base image and library version updates.
  • Build automated ServiceNow RITM generation, routing, and status tracking.
  • Monitor automation pipelines and implement proactive alerting and self-healing mechanisms.
Policy-as-Code & Security Automation
  • Implement policy-as-code using OPA / Conftest or equivalent technologies.
  • Build automated security policy enforcement and risk-based gating within CI/CD pipelines.
  • Develop security scanning integrations including:
    • SAST
    • DAST
    • SCA
    • Container scanning
    • IaC scanning
    • Secrets detection
  • Build automated vulnerability feedback and retesting mechanisms.
  • Implement compliance automation and audit-ready evidence generation.
AI & Intelligent Automation
  • Integrate vulnerability feeds with a LangChain-based AI triage and scoring engine.
  • Build vulnerability deduplication and normalization across multiple security platforms.
  • Develop automated vulnerability routing based on risk score, asset criticality, and remediation pathway.
  • Build AI co-pilot integrations for automated L3 simple-fix PR generation.
  • Develop Python-based AI agent pipelines using LangChain and Azure OpenAI.
  • Build feedback loops to improve AI triage accuracy using remediation closure data.
Reporting & Dashboard Development
  • Build and maintain an Archer-based SLA compliance dashboard.
  • Track vulnerability status, MTTR, backlog burn-down, severity, and remediation progress.
  • Develop automated weekly SLA burn-down reports and monthly executive summaries.
  • Build Jira-based tracking and workflow integrations.
  • Develop data pipelines integrating Archer, ServiceNow, Jira, and vulnerability scanning platforms.
  • Build operational dashboards for automation efficiency, runbook execution rates, PR throughput, and AI triage accuracy.
Continuous Improvement
  • Identify recurring manual processes suitable for automation.
  • Monitor and optimize runbook execution performance.
  • Improve automation throughput and reduce failure rates.
  • Provide technical recommendations for continuous improvement of the automation framework.
  • Document automation scripts, runbooks, and integration patterns in Confluence.
  • Support knowledge transfer and adoption of new automation capabilities.
Required Qualifications
  • 8+ years of hands-on experience in DevSecOps, automation engineering, or infrastructure automation.
  • Strong hands-on Python scripting experience.
  • Strong Ansible and Terraform experience.
  • Experience building automation scripts, API integrations, and data pipelines.
  • Hands-on Jenkins and GitHub Actions experience, including pipeline development, maintenance, and troubleshooting.
  • Production experience with at least two security scanning areas:
    • SAST
    • DAST
    • SCA
    • Container scanning
    • IaC scanning
  • Strong ServiceNow REST API integration experience.
  • Experience automating ITSM workflows, RITM creation, routing, and status tracking.
  • Strong Docker and container operations experience.
  • Experience with base image management, Dockerfile optimization, and container security scanning.
  • Hands-on OPA / Conftest or equivalent policy-as-code experience.
  • Experience with vulnerability management or GRC platforms such as Archer, Qualys, or Tenable.
  • Strong REST API development and integration experience.
  • Strong Jira administration and workflow automation experience.
  • Excellent verbal and written communication skills.
  • Strong technical documentation and analytical skills.
  • Strong attention to detail.
Preferred / Valuable Experience
  • Vulnerability remediation automation
  • AI-driven vulnerability triage
  • LangChain
  • Azure OpenAI
  • AI agents / intelligent automation
  • Security orchestration
  • AIOps
  • Banking or financial-services environments
  • Vulnerability SLA management
  • Compliance automation
  • Automated PR generation
  • Multi-platform vulnerability normalization and deduplication
Back to Job Search