Cyber Security Senior Engineer

Senior security evangelist with hands-on experience in Cyber Security development, driving delivery of platform capabilities within the cyber domain, supporting application needs for on-prem and cloud.

Bring engineering expertise in cyber security and continually keep up to date on new gaps within application security and devsecops platform capabilities, to be bridged and resolved.

Able to deliver highly secure and superbly engineered code.

Identify gaps within developers’ security platform and drive resolutions by developing components and addressing the gaps, including authentication and authorization, credential management, encryption, certificates management and more.

Citi is seeking an experienced senior backend application security engineer to join the Cyber enablement group. You’ll be responsible for engineering cyber foundations , global scale, technology assets and platforms that are secure by design, employ a zero-trust model and are built with best-in-class security controls. These stacks will be developed using modern, cloud native principles and will employ leading technologies and open-source technologies. You will also be responsible for leading the end to end solutions working with global teams and will be hand-on frontrunning the execution of transformative software at Citi.

The solutions will be including open source and propriety tooling and platforms such as Google Cloud, AWS, Kubernetes and its ecosystem and more. You’ll also build the automation for self-service security controls .

Bring engineering expertise in cyber security and continually keep up to date on new gaps within application security and devsecops platform capabilities, to be bridged and resolved.

Able to deliver highly secure and superbly engineered code.

Identify gaps within developers’ security platform and drive resolutions by developing components and addressing the gaps, including authentication and authorization, credential management, encryption, certificates management and more.

About the Department

• Developer Engineering is a new function within ICG Technology. Our mission is to make it easy and enjoyable

for development teams to go from a business idea to delivery of an innovative production solution. This will be

done by improving and upgrading our tools, streamlining our processes, automating and strengthening our controls, and helping development teams adopt modern ways of working.

This new initiative represents a key investment in our future development capability. We are assembling an expert team to transform the working environment of the 18,000 people who make up the ICG development

community and help them dramatically change their approach to developing software across the many different

technologies we support. This is a challenging remit, but with the scale and variety comes a unique opportunity to be agents of cultural and technical change who have a huge impact on the bank.

Key Responsibilities:

• Contributes as part of an expert team of cyber security engineers by providing resolutions in code (Java) to real security problems such as authentication , secrets management , secured logging and more
• Pursue key cyber security topics and ensure a solution is delivered that is fit for purpose for ICG enterprise On-prem cloud environment.
• Identify security risks in an architecture and translate them into actionable development tasks for delivery by this team or other ICG engineering teams (for example, via gherkin formatted stories).
• Work in concert with Global Threat Modelling teams to collaborate on risk identification, approach and best practices. Able to drive architecture threat model process and propose security resolutions to weaknesses
• Evaluate third party services, systems, tools, libraries and solutions and drive solutions by driving development solutions
• Continual self-study to keep up to date on new threat and attack methods
• Demonstrate threats or risks via live demo or written narrative.
• Acting as an advisor to ICG development teams to help them improve their expertise
• Able to drive Java expert education working with Java developers closely

Experience:

• Deep expertise of cyber security, demonstrated by previous roles in the domain and industry certification - at least 8 years
• Good understanding of application security domains such as Authentication (AuthZ,AuthN), Credential management and Encryption
• Hands-on experience developing high-performance solutions following Agile methodologies and actual development
• Ability to write gherkin and code in a behavior driven development framework (will train if necessary)
• Able to write Java code to dive secured library solutions
• Intimate knowledge of the development process, ideally from working in and/or leading development teams in a banking environment

Characteristics:

• Self-motivated with the ability to work independently and as a team member with minimal direction
• Excellent communicator who gets on well with others, building strong professional relationships
• Able to negotiate and influence at all levels
• Collaborative by nature, builds partnerships across the firm
• Strong desire to learn and contribute solutions and ideas to broader team
• Creative and innovative, brings different angles to problems and provides new solutions Risk and security focused, putting diligent risk management and security at the core of everything they do

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

#LI-Hybrid

-------------------------------------------------

Job Family Group:

Technology

-------------------------------------------------

Job Family:

Applications Development

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting