Software Developer in Test

Automation Engineer (AI-Driven Code Security & Remediation Framework)Location: New York / Hybrid / Face-to-Face Interview RequiredRole SummaryThe Automation Engineer will build and operate a framework that scans GitHub and Artifactory repositories for security vulnerabilities and End-of-Life (EOL) libraries. The role will leverage AI-driven automation to remediate identified findings, significantly reducing manual triage and patching time across the organization.Core Technical SkillsProgramming: Strong Python experience for developing scanners, orchestration workflows, and API integrations. Basic Bash scripting experience for CI/CD automation.Source & Artifact Systems: Strong experience with GitHub, including GitHub Actions, Advanced Security, and Pull Request workflows, as well as JFrog Artifactory/Xray.Ability to design and scale solutions across multi-repository and multi-language codebases.Security Scanning Tools: Hands-on experience with tools such as Snyk, JFrog Xray, CodeQL, Dependabot, Trivy, or Semgrep.Strong understanding of CVE/CVSS vulnerability scoring and EOL-detection sources such as endoflife.date.AI-Driven Remediation: Experience building agentic or LLM-based workflows capable of interpreting security findings, generating remediation patches and pull requests, running automated tests, and summarizing fixes.Experience with prompt engineering for AI-based code-editing or remediation agents.CI/CD & Orchestration: Experience integrating automated scanning and remediation pipelines into GitHub Actions and/or Jenkins.Experience using Docker for isolated remediation and testing environments.Experience with workflow scheduling and orchestration using Airflow, cron, or similar tools.Reporting: Ability to structure vulnerability findings using JSON, SQL, or similar formats and create dashboards for tracking security coverage, remediation progress, and trends.Supporting SkillsStrong understanding of security fundamentals, including injection vulnerabilities, authentication flaws, software supply-chain risks, and SBOM-related risks.Experience with risk-based vulnerability prioritization beyond standard CVSS scores.Strong understanding of semantic versioning and safe automated dependency upgrades.Strong testing discipline, including regression validation before automated merges.Communication SkillsAbility to translate technical vulnerability findings into concise, risk-focused updates for leadership, including exposure counts, Mean Time to Remediate (MTTR), and remediation-rate trends.Ability to write clear status communications regarding scan coverage, remediation progress, and outstanding critical vulnerabilities.Ability to build and communicate business cases highlighting time savings, security risk reduction, and operational improvements for non-technical stakeholders.Continuous LearningStay current with emerging Agentic AI and AI-driven security remediation tools.Evaluate new automation and remediation technologies for suitability before firm-wide adoption.All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.