Automation Engineer with AI

Capgemini • New York, NY

6d • $106,230 - $145,000 • Onsite

About The Position

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Requirements

• Strong Python (scanners, orchestration, API integration)
• Basic Bash for CI/CD glue
• Hands-on with Snyk, Xray, CodeQL / Dependabot, Trivy, or Semgrep
• Understanding of CVE/CVSS scoring and EOL-detection sources (e.g., endoflife.date)
• Building agentic workflows (LLM-based) that interpret findings, generate patch PRs, run tests, and summarize fixes
• Prompt engineering for code-editing agents
• Security fundamentals (injection, auth flaws, supply-chain/SBOM risk)
• Risk-based prioritization beyond raw CVSS scores
• Semantic versioning awareness for safe auto-upgrades
• Testing discipline - regression validation before auto-merge

Nice To Haves

• GitHub (Actions, Advanced Security, PR workflows)
• JFrog Artifactory/Xray
• Ability to scale across multi-repo, multi-language codebases
• CI/CD & Orchestration
• Integrating scan-and-fix pipelines into GitHub Actions/Jenkins
• Docker for isolated fix-testing
• Scheduling via Airflow/cron
• Reporting
• Structuring findings (JSON/SQL) into dashboards for tracking coverage and trends

Responsibilities

• Builds and operates a system that scans GitHub/Artifactory repos for vulnerabilities and EOL libraries.
• Uses AI-driven automation to remediate findings, cutting manual triage and patch time firm-wide.
• Integrates scan-and-fix pipelines into GitHub Actions/Jenkins.
• Uses Docker for isolated fix-testing.
• Schedules tasks via Airflow/cron.
• Structures findings (JSON/SQL) into dashboards for tracking coverage and trends.
• Translates vulnerability data into concise, risk-framed leadership updates (exposure counts, MTTR, fix-rate trends).
• Writes clear status emails on scan coverage and outstanding critical items.
• Builds the business case (time saved, risk reduced) for non-technical stakeholders.
• Tracks emerging agentic/AI remediation tools and evaluates fit before firm-wide adoption.

Benefits

• Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade
• Company paid holidays
• Personal Days
• Sick Leave
• Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
• Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
• Life and disability insurance
• Employee assistance programs
• Other benefits as provided by local policy and eligibility

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed