Automation Lead - DevSecOps & Vulnerability Management
Job ID: J0526-2181
Location: Cleveland, OH / Pittsburgh, PA / Dallas, TX
Work Model: Onsite at Client Site
Employment Type: Permanent Full-Time
Position Overview
We are seeking an experienced Automation Lead to support the development of a dedicated vulnerability management and security automation practice within a large U.S. banking environment.
This is a highly hands-on role focused on automating vulnerability remediation processes, building scalable DevSecOps automation pipelines, implementing policy-as-code, integrating enterprise security platforms, and enabling AI-driven vulnerability triage and remediation.
The Automation Lead will work closely with Solution Architects, AI/ML Engineers, security teams, and execution teams to build and maintain automation frameworks across vulnerability intake, remediation, CI/CD security, reporting, and intelligent automation.
Key Skills
DevSecOps
Automation Engineering
Vulnerability Management
Python
Ansible
Terraform
Jenkins
GitHub Actions
CI/CD
ServiceNow REST API
RITM Automation
Docker
Container Security
OPA / Conftest
Policy-as-Code
SAST / DAST / SCA
Container Scanning
IaC Scanning
REST APIs
Archer
Qualys / Tenable
Tanium
Sysdig
SecurityCenter
Imperva
Jira
LangChain
Azure OpenAI
AI/ML Automation
Vulnerability Triage
Infrastructure Automation
Automation Pipeline Development & Maintenance
Build, maintain, and enhance runbooks for L1 and L2 vulnerability remediation.
Automate OS patching, base image updates, SSL/TLS configuration, infrastructure configuration changes, and middleware updates.
Develop Python-based automation for vulnerability intake, deduplication, normalization, and routing.
Integrate vulnerability data from Archer, Tanium, Sysdig, SecurityCenter, and Imperva.
Build and maintain integrations with Jenkins and GitHub Actions.
Develop automated pull-request generation for container base image and library version updates.
Build automated ServiceNow RITM generation, routing, and status tracking.
Monitor automation pipelines and implement proactive alerting and self-healing mechanisms.
Policy-as-Code & Security Automation
Implement policy-as-code using OPA / Conftest or equivalent technologies.
Build automated security policy enforcement and risk-based gating within CI/CD pipelines.
Develop security scanning integrations including:
SAST
DAST
SCA
Container scanning
IaC scanning
Secrets detection
Build automated vulnerability feedback and retesting mechanisms.
Implement compliance automation and audit-ready evidence generation.
AI & Intelligent Automation
Integrate vulnerability feeds with a LangChain-based AI triage and scoring engine.
Build vulnerability deduplication and normalization across multiple security platforms.
Develop automated vulnerability routing based on risk score, asset criticality, and remediation pathway.
Build AI co-pilot integrations for automated L3 simple-fix PR generation.
Develop Python-based AI agent pipelines using LangChain and Azure OpenAI.
Build feedback loops to improve AI triage accuracy using remediation closure data.
Reporting & Dashboard Development
Build and maintain an Archer-based SLA compliance dashboard.
Track vulnerability status, MTTR, backlog burn-down, severity, and remediation progress.
Develop automated weekly SLA burn-down reports and monthly executive summaries.
Build Jira-based tracking and workflow integrations.
Develop data pipelines integrating Archer, ServiceNow, Jira, and vulnerability scanning platforms.
Build operational dashboards for automation efficiency, runbook execution rates, PR throughput, and AI triage accuracy.
Continuous Improvement
Identify recurring manual processes suitable for automation.
Monitor and optimize runbook execution performance.
Improve automation throughput and reduce failure rates.
Provide technical recommendations for continuous improvement of the automation framework.
Document automation scripts, runbooks, and integration patterns in Confluence.
Support knowledge transfer and adoption of new automation capabilities.
Required Qualifications
8+ years of hands-on experience in DevSecOps, automation engineering, or infrastructure automation.
Strong hands-on Python scripting experience.
Strong Ansible and Terraform experience.
Experience building automation scripts, API integrations, and data pipelines.
Hands-on Jenkins and GitHub Actions experience, including pipeline development, maintenance, and troubleshooting.
Production experience with at least two security scanning areas:
SAST
DAST
SCA
Container scanning
IaC scanning
Strong ServiceNow REST API integration experience.
Experience automating ITSM workflows, RITM creation, routing, and status tracking.
Strong Docker and container operations experience.
Experience with base image management, Dockerfile optimization, and container security scanning.
Hands-on OPA / Conftest or equivalent policy-as-code experience.
Experience with vulnerability management or GRC platforms such as Archer, Qualys, or Tenable.
Strong REST API development and integration experience.
Strong Jira administration and workflow automation experience.
Excellent verbal and written communication skills.
Strong technical documentation and analytical skills.
Strong attention to detail.
Preferred / Valuable Experience
Vulnerability remediation automation
AI-driven vulnerability triage
LangChain
Azure OpenAI
AI agents / intelligent automation
Security orchestration
AIOps
Banking or financial-services environments
Vulnerability SLA management
Compliance automation
Automated PR generation
Multi-platform vulnerability normalization and deduplication
M1
DI-CB2
L1 - KB1
Ref: #404-IT Pittsburgh
System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
