2 days ago
Base Salary
$106k - $145k/yr
Responsibilities
- Build and operate systems that scan GitHub and Artifactory repositories for vulnerabilities and end-of-life libraries.
- Develop Python scanners, orchestration, API integrations, and AI-driven workflows that interpret findings and generate patch pull requests.
- Integrate scanning and remediation pipelines with GitHub Actions and Jenkins, using Docker for isolated fix testing and Airflow or cron for scheduling.
- Prioritize findings using CVE/CVSS data, supply-chain risk, lifecycle information, and business impact.
- Run regression validation before automated merges and track coverage, exposure, mean time to remediation, and fix-rate trends.
- Translate vulnerability findings into concise leadership updates, status communications, and business cases for automation.
- Evaluate emerging agentic and AI remediation tools for potential firm-wide adoption.
Requirements
- Strong Python programming experience for scanners, orchestration, and API integration.
- Basic Bash experience for CI/CD integration.
- Experience with GitHub, including Actions, Advanced Security, and pull request workflows, plus JFrog Artifactory and Xray.
- Hands-on experience with one or more of Snyk, Xray, CodeQL, Dependabot, Trivy, or Semgrep.
- Experience building LLM-based agentic workflows, prompt engineering for code-editing agents, and automated patch generation.
- Knowledge of CVE/CVSS scoring, end-of-life detection, injection and authentication flaws, software supply-chain and SBOM risk, and semantic versioning.
- Experience integrating CI/CD pipelines, using Docker for isolated testing, and scheduling jobs with Airflow or cron.
- Ability to structure findings with JSON or SQL for dashboards and communicate risk and remediation trends to nontechnical stakeholders.
- Ability to assess risk beyond raw CVSS scores and validate regressions before auto-merge.
Benefits
- Full-time regular-employee benefits package with paid time off, including 12–25 vacation days depending on employee grade, company holidays, personal days, and sick leave.
- Medical, dental, and vision coverage, or provincial healthcare coordination in Canada.
- Retirement savings plans such as 401(k) in the U.S. or RRSP in Canada.
- Life and disability insurance.
- Employee assistance programs and other benefits subject to local policy and eligibility.
- Location: NYC, NY.
Categories
About Capgemini
Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion. Make it real | www.capgemini.com