Principal AI Security Automation Engineer
Depository Trust & Clearing Corporation (DTCC)3 months ago
Jersey City, NJ, USAStaff+
Responsibilities
- Design and implement automation workflows supporting AI-powered vulnerability discovery and remediation.
- Develop integrations between AI scanning platforms, security tools, and SDLC platforms.
- Build and maintain findings ingestion, normalization, and enrichment pipelines.
- Integrate AI scanning outputs into ASPM, vulnerability management, and developer workflows.
- Develop automated triage, prioritization, and remediation orchestration capabilities.
- Create dashboards, metrics, and reporting capabilities for security decision-making.
- Build APIs and automation services connecting enterprise security tooling.
- Partner with Application Security, Vulnerability Operations, and Development teams to operationalize findings.
- Improve scanning efficiency through workflow optimization and intelligent automation.
- Support secure deployment and operation of AI-based security capabilities.
- Contribute to governance, auditability, and operational controls for AI-driven security processes.
- Evaluate emerging AI security technologies and identify automation opportunities.
Requirements
- A minimum of 8 years of related experience.
- At least 6 years of software engineering, DevSecOps, Application Security, or security automation experience.
- Strong hands-on Python development experience for production-grade security tooling, automation frameworks, and integrations.
- Experience designing and operating application security tooling including SAST, DAST, SCA, secrets scanning, ASPM, or vulnerability management platforms.
- Experience integrating security controls into CI/CD pipelines and developer workflows.
- Strong understanding of secure software development, OWASP Top 10, secure coding, threat modeling, and vulnerability remediation.
- Experience developing API integrations using REST APIs, SDKs, and event-driven architectures.
- Experience with AI/LLM platforms such as Claude, OpenAI, Bedrock, or similar.
- Experience building automated workflows for vulnerability discovery, triage, prioritization, and remediation.
- Experience with Docker, Kubernetes, and OpenShift.
- Familiarity with AWS security services, IAM, Security Hub, GuardDuty, and cloud-native security controls.
- Experience with Git, Bitbucket, Jira, Jenkins, GitHub Actions, Maven, and related platforms.
- Understanding of AI security risks including prompt injection, model abuse, AI supply chain security, and agent security.
- Experience working in Agile delivery environments.
- A bachelor's degree is preferred and equivalent experience may be accepted.
- Preferred certifications include CISSP, TAISE, OSCP, CSSLP, or similar.
- Preferred experience includes Apiiro, Veracode, SonarQube, Semgrep, Burp Suite, policy-as-code, security guardrails, and enterprise-scale vulnerability management.
Benefits
- Competitive compensation including base pay and annual incentive.
- Comprehensive health and life insurance and well-being benefits, based on location.
- Pension and retirement benefits.
- Paid time off, personal and family care, and other leaves of absence.
- Flexible hybrid work model with three days onsite and two days remote; onsite days are Tuesdays, Wednesdays, and a third team- or employee-specific day.
- Professional development investment and a supportive internal community.
Tech Stack
Categories
About Depository Trust & Clearing Corporation (DTCC)
Depository Trust & Clearing Corporation (DTCC) runs global post-trade market infrastructure, delivering clearing, settlement, securities depository, trade reporting, and data services for broker-dealers, banks, and asset managers. It provides these services through subsidiaries such as DTC, NSCC, FICC, and the Global Trade Repository, with revenue primarily from transaction and service fees. Founded in 1973 and headquartered in Jersey City, NJ, DTCC is industry-owned and privately held, serving markets across multiple regions.