C2C contract jobs
Location: New York, NY (Onsite)
Duration: Long Term Contract
Experience: 15+
Core Technical Skills
Programming: Strong Python (scanners, orchestration, API integration); basic Bash for CI/CD glue
Source & Artifact Systems: GitHub (Actions, Advanced Security, PR workflows) and JFrog Artifactory/Xray; ability to scale across multi-repo, multi-language codebases
Scanning Tools: Hands-on with Snyk, Xray, CodeQL/Dependabot, Trivy, or Semgrep; understanding of CVE/CVSS scoring and EOL-detection sources (e.g. endoflife.date)
AI-Driven Remediation: Building agentic workflows (LLM-based) that interpret findings, generate patch PRs, run tests, and summarize fixes; prompt engineering for code-editing agents
CI/CD & Orchestration: Integrating scan-and-fix pipelines into GitHub Actions/Jenkins; Docker for isolated fix-testing; scheduling via Airflow/cron
Reporting: Structuring findings (JSON/SQL) into dashboards for tracking coverage and trends
To apply for this job email your details to sonu.chauhan@1rpo.net