Automation Lead

Job ID: J0526-2181

Location: Cleveland, OH / Pittsburgh, PA / Dallas, TX

Work Model: Onsite at Client Site

Employment Type: Permanent Full-Time

Position Overview: We are seeking an experienced Automation Lead to support the development of a dedicated vulnerability management and security automation practice within a large U.S. banking environment. This is a highly hands-on role focused on automating vulnerability remediation processes, building scalable DevSecOps automation pipelines, implementing policy-as-code, integrating enterprise security platforms, and enabling AI-driven vulnerability triage and remediation. The Automation Lead will work closely with Solution Architects, AI/ML Engineers, security teams, and execution teams to build and maintain automation frameworks across vulnerability intake, remediation, CI/CD security, reporting, and intelligent automation.

Key Skills: DevSecOps Automation Engineering Vulnerability Management Python Ansible Terraform Jenkins GitHub Actions CI/CD ServiceNow REST API RITM Automation Docker Container Security OPA / Conftest Policy-as-Code SAST / DAST / SCA Container Scanning IaC Scanning REST APIs Archer Qualys / Tenable Tanium Sysdig SecurityCenter Imperva Jira LangChain Azure OpenAI AI/ML Automation Vulnerability Triage Infrastructure Automation Automation Pipeline Development & Maintenance Build, maintain, and enhance runbooks for L1 and L2 vulnerability remediation Automate OS patching, base image updates, SSL/TLS configuration, infrastructure configuration changes, and middleware updates. Develop Python-based automation for vulnerability intake, deduplication, normalization, and routing. Integrate vulnerability data from Archer, Tanium, Sysdig, SecurityCenter, and Imperva Build and maintain integrations with Jenkins and GitHub Actions Develop automated pull-request generation for container base image and library version updates. Build automated ServiceNow RITM generation, routing, and status tracking. Monitor automation pipelines and implement proactive alerting and self-healing mechanisms. Policy-as-Code & Security Automation Implement policy-as-code using OPA / Conftest or equivalent technologies. Build automated security policy enforcement and risk-based gating within CI/CD pipelines. Develop security scanning integrations including: SAST DAST SCA Container scanning IaC scanning Secrets detection Build automated vulnerability feedback and retesting mechanisms. Implement compliance automation and audit-ready evidence generation. AI & Intelligent Automation Integrate vulnerability feeds with a LangChain-based AI triage and scoring engine Build vulnerability deduplication and normalization across multiple security platforms. Develop automated vulnerability routing based on risk score, asset criticality, and remediation pathway. Build AI co-pilot integrations for automated L3 simple-fix PR generation Develop Python-based AI agent pipelines using LangChain and Azure OpenAIBuild feedback loops to improve AI triage accuracy using remediation closure data. Reporting & Dashboard Development Build and maintain an Archer-based SLA compliance dashboard Track vulnerability status, MTTR, backlog burn-down, severity, and remediation progress. Develop automated weekly SLA burn-down reports and monthly executive summaries. Build Jira-based tracking and workflow integrations. Develop data pipelines integrating Archer, ServiceNow, Jira, and vulnerability scanning platforms Build operational dashboards for automation efficiency, runbook execution rates, PR throughput, and AI triage accuracy. Continuous Improvement Identify recurring manual processes suitable for automation. Monitor and optimize runbook execution performance. Improve automation throughput and reduce failure rates. Provide technical recommendations for continuous improvement of the automation framework. Document automation scripts, runbooks, and integration patterns in Confluence Support knowledge transfer and adoption of new automation capabilities.

Required Qualifications: 8+ years of hands-on experience in DevSecOps, automation engineering, or infrastructure automation. Strong hands-on Python scripting experience. Strong Ansible and Terraform experience. Experience building automation scripts, API integrations, and data pipelines. Hands-on Jenkins and GitHub Actions experience, including pipeline development, maintenance, and troubleshooting. Production experience with at least two security scanning areasSAST DAST SCA Container scanning IaC scanning Strong ServiceNow REST API integration experience. Experience automating ITSM workflows, RITM creation, routing, and status tracking Strong Docker and container operations experience. Experience with base image management, Dockerfile optimization, and container security scanning. Hands-on OPA / Conftest or equivalent policy-as-code experience. Experience with vulnerability management or GRC platforms such as Archer, Qualys, or Tenable Strong REST API development and integration experience. Strong Jira administration and workflow automation experience. Excellent verbal and written communication skills. Strong technical documentation and analytical skills. Strong attention to detail. Preferred / Valuable Experience Vulnerability remediation automation AI-driven vulnerability triage LangChain Azure OpenAI AI agents / intelligent automation Security orchestration AIOps Banking or financial-services environments Vulnerability SLA management Compliance automation Automated PR generation Multi-platform vulnerability normalization and deduplication #M1 #DI-CB2 L1 - KB1Ref: #404-IT Pittsburgh