Automation Lead

Job order - J
- Permanent Full Time

Title Automation Lead

Category Testing/Quality Assurance

City Various, , United States

We’re standing up a dedicated vulnerability management practice at one of the largest banks in the US, automating what two vendor teams currently do by hand, and building the AI layer that takes it further. The work is hands‑on, the impact is visible, and you’ll have a delivery team ready to execute behind you from day one. This position is located at our client site in Cleveland, OH, Pittsburgh, PA, or Dallas, TX.

For this role on this particular client engagement, employer sponsorship of immigration related visa and/or green card status as part of the PERM process will not be available.

• Build, maintain, and enhance the runbook library for L1 and L2 vulnerability remediation - covering OS patching, base image updates, SSL/TLS configuration, infrastructure config changes, and middleware updates
• Develop and maintain automation scripts for vulnerability intake, deduplication, and routing across scan sources including Archer, Tanium, Sysdig, Security Center, and Imperva
• Implement and maintain CI/CD pipeline integrations per architecture specifications
  - Jenkins and Git Hub Actions specifically
• Build and maintain automated PR generation pipelines for container base image updates and library version bumps across application mnemonics
• Develop and maintain the automated RITM generation integration with Service Now - triggering, routing, and status tracking without manual intervention
• Ensure automation pipeline health through proactive monitoring, alerting, and self-healing mechanisms

• Implement policy-as-code rules using OPA/Conftest per framework specifications defined by the Solution Architect
• Build automated policy enforcement and risk-based gating mechanisms within CI/CD pipelines
• Develop and maintain automated vulnerability scanning integrations - SAST, DAST, SCA, container scanning, IaC scanning, and secrets detection
• Build feedback loop mechanisms to flag and retest vulnerabilities prior to production deployment
• Implement and maintain compliance automation rules and audit-ready evidence generation

• Collaborate with AI/ML Engineers to build and maintain the AI triage engine integration - connecting vulnerability feeds to the Lang Chain-based routing and scoring layer
• Build the deduplication layer that normalizes and cross-references vulnerability data across multiple scan sources
• Implement automated vulnerability routing logic based on risk scores, asset criticality, and remediation pathway classification
• Build and maintain AI co‑pilot integrations for L3 simple fix PR generation
  - Python-based agent pipeline using Lang Chain and Azure OpenAI
• Develop feedback loop mechanisms that feed closure data back into the triage model for continuous accuracy improvement

• Build and maintain the unified SLA compliance dashboard in Archer - real‑time vulnerability status, MTTR tracking, backlog burn‑down by severity and mnemonic
• Develop weekly automated SLA burn‑down reports and monthly executive summaries per specifications defined by the Solution Architect
• Build Jira‑based tracking integrations unifying WS1 and WS2 reporting into a single view
• Implement automated data pipelines that aggregate vulnerability status across Archer, Service Now, Jira, and scan sources into the reporting layer
• Develop and maintain operational metrics dashboards - automation efficiency, runbook execution rates, PR generation throughput, AI triage accuracy

• Identify opportunities to automate recurring manual tasks across all three execution crews and implement solutions
• Monitor runbook execution performance and tune scripts to improve throughput and reduce failure rates
• Contribute execution-level insights to the Solution Architect for continuous improvement of the automation framework
• Document all automation scripts, runbooks, and integration patterns in Confluence - maintaining up-to-date operational guides for the GCC execution…