Job Role:
Job Role; Automation Engineer with AILocation: NYC, NY Duration: Fulltime.Role SummaryBuilds and operates a system that scans GitHub/Artifactory repos for vulnerabilities and EOL libraries, then uses AI-driven automation to remediate findings - cutting manual triage and patch time firm-wide.
Core Technical Skills- Programming: Strong Python (scanners, orchestration, API integration); basic Bash for CI/CD glue
- Source & Artifact Systems: GitHub (Actions, Advanced Security, PR workflows) and JFrog Artifactory/Xray; ability to scale across multi-repo, multi-language codebases
- Scanning Tools: Hands-on with Snyk, Xray, CodeQL / Dependabot, Trivy, or Semgrep; understanding of CVE/CVSS scoring and EOL-detection sources (e.g., endoflife.date)
- AI-Driven Remediation: Building agentic workflows (LLM-based) that interpret findings, generate patch PRs, run tests, and summarize fixes; prompt engineering for code-editing agents
- CI/CD & Orchestration: Integrating scan-and-fix pipelines into GitHub Actions/Jenkins; Docker for isolated fix-testing; scheduling via Airflow/cron
- Reporting: Structuring findings (JSON/SQL) into dashboards for tracking coverage and trends
Supporting Skills- Security fundamentals (injection, auth flaws, supply-chain/SBOM risk)
- Risk-based prioritization beyond raw CVSS scores
- Semantic versioning awareness for safe auto-upgrades
- Testing discipline - regression validation before auto-merge
Communication Skills- Translating vulnerability data into concise, risk-framed leadership updates (exposure counts, MTTR, fix-rate trends)
- Writing clear status emails on scan coverage and outstanding critical items
- Building the business case (time saved, risk reduced) for non-technical stakeholders
Continuous Learning- Tracking emerging agentic/AI remediation tools and evaluating fit before firm-wide adoption
The base compensation range for this role in the posted location is: $106230 - $145000
Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.
These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.
It is not typical for candidates to be hired at or near the top of the posted compensation range.
In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.
Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
