Security Automation Engineer

Innova Solutions•Columbus, OH

16h•$70 - $75•Hybrid

About The Position

Innova Solutions is immediately hiring for a Security Automation Engineer. This is a Full Time – Contract position with a duration of 12 Months. The role is based in Columbus, OH and Irving, TX, requiring 3 days onsite and 2 days remote. As a Security Automation Engineer, your responsibilities will include designing, integrating, and maintaining automated vulnerability detection tools (SAST, DAST, SCA) within enterprise CI/CD pipelines. You will also build scalable internal developer tools, custom rulesets, API integrations, and policy-as-code frameworks to support security modernization. A key aspect of this role involves leveraging Generative AI and LLM-powered tools to enhance vulnerability triage, reduce false positives, and automate code remediation. You will collaborate with engineering teams to embed automated security controls into cloud-native application stacks and improve data regulatory posture and security compliance. The goal is to streamline operations by eliminating manual security reviews through continuous automation and providing actionable developer telemetry.

Requirements

Demonstrated polyglot proficiency with deep, hands-on production experience in Python and Java.
Fluency in at least one modern language (e.g., Golang, Rust, or JavaScript/TypeScript).
Strong understanding of cloud-native architectures, microservices, containerization (Docker, Kubernetes), and CI/CD automation platforms (e.g., GitHub Actions, GitLab CI, Jenkins).
Practical experience implementing or integrating GenAI-enabled solutions, LLMs, or AI-assisted development tools to solve software engineering or security challenges.
Familiarity with modern code scanning frameworks, vulnerability detection mechanisms (SAST, DAST, dependency tracking), and secure coding practices (OWASP Top 10, CWE).

Responsibilities

Design, integrate, and maintain automated static and dynamic code scanning tooling (SAST, DAST, SCA) across enterprise CI/CD pipelines to detect flaws early in the software development lifecycle (SDLC).
Build scalable internal developer tools, custom rulesets, API integrations, and policy-as-code frameworks that enable security modernization across multiple technology portfolios without sacrificing developer productivity.
Leverage Generative AI and LLM-powered tools to accelerate vulnerability triage, context-aware false positive reduction, and automated code remediation workflows.
Partner with engineering teams to embed automated security controls directly into containerized, microservices-based, and cloud-native application stacks.
Enhance data regulatory posture and security compliance by securing services and data pipelines that handle critical enterprise workloads.
Eliminate manual security reviews and friction through continuous automation, actionable developer telemetry, and standardized security guardrails.