New York, NY, United States (Hybrid)
Contract (3 months 8 days)
Published 22 hours ago
Python Automation
CI/CD pipelines
jenkins
integration testing
prompt engineering
Risk prioritization
Agentic AI
GitHub Actions
Builds and operates a system that scans GitHub/Artifactory repos for vulnerabilities and EOL libraries, then uses AI-driven automation to remediate findings cutting manual triage and patch time firm-wide.
Core Technical Skills:
-
7+ years of experience
-
Programming: Strong Python (scanners, orchestration, API integration); basic Bash for CI/CD glue
-
Source & Artifact Systems: GitHub (Actions, Advanced Security, PR workflows) and JFrog Artifactory/Xray; ability to scale across multi-repo, multi-language codebases
-
Scanning Tools: Hands-on with Snyk, Xray, CodeQL / Dependabot, Trivy, or Semgrep; understanding of CVE/CVSS scoring and EOL-detection sources (e.g., endoflife.date)
-
AI-Driven Remediation: Building agentic workflows (LLM-based) that interpret findings, generate patch PRs, run tests, and
summarize fixes; prompt engineering for code-editing agents
-
CI/CD & Orchestration: Integrating scan-and-fix pipelines into GitHub Actions/Jenkins; Docker for isolated fix-testing; scheduling via Airflow/cron
-
Reporting: Structuring findings (JSON/SQL) into dashboards for tracking coverage and trends
Supporting Skills:
-
Security fundamentals (injection, auth flaws, supply-chain/SBOM risk)
-
Risk-based prioritization beyond raw CVSS scores
-
Semantic versioning awareness for safe auto-upgrades
-
Testing discipline regression validation before auto-merge
Communication Skills:
-
Translating vulnerability data into concise, risk-framed leadership updates (exposure counts, MTTR, fix-rate trends)
-
Writing clear status emails on scan coverage and outstanding critical items
-
Building the business case (time saved, risk reduced) for non-technical stakeholders
-
Continuous Learning
-
Tracking emerging agentic/AI remediation tools and evaluating fit before firm-wide adoption
The pay range that the employer in good faith reasonably expects to pay for this position is $34.67/hour - $54.18/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.
Tundra Technical Solutions is among North America’s leading providers of Staffing and Consulting Services. Our success and our clients’ success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.