Cyber security engineering VP for ICG developer engineering

Cyber Security Engineering VP for ICG Engineering Excellence

Senior security evangelist with hands on experience in Cyber Security development , driving delivery of platform capabilities within the cyber domain supporting application needs for on prem and cloud.

Driving Ownership areas

Bring engineering expertise in cyber security and continually keeping up to date on new gaps within application security and devsecops platform capabilities to be bridged and resolved .Able to deliver highly secure and superbly engineered code.Identifying gaps within developers security platform and driving resolutions by developing components addressing the gaps including authentication and authorization , credential management , encryption , certificates management and more 

This position requires close collaboration and partnership with Security Engineering, the Security Operations Centre and the Global Threat Modelling team.

Cyber Security Engineering VP for ICG Engineering Excellence

Senior security evangelist with hands on experience in Cyber Security development , driving delivery of platform capabilities within the cyber domain supporting application needs for on prem and cloud.

Driving Ownership areas

Bring engineering expertise in cyber security and continually keeping up to date on new gaps within application security and devsecops platform capabilities to be bridged and resolved .Able to deliver highly secure and superbly engineered code.Identifying gaps within developers security platform and driving resolutions by developing components addressing the gaps including authentication and authorization , credential management , encryption , certificates management and more 

This position requires close collaboration and partnership with Security Engineering, the Security Operations Centre and the Global Threat Modelling team.

About us Engineering Excellence is a newly formed organization/team of top-tier experts tasked with eliminating waste and enhancing productivity and happiness for the 35,000+ developers they serve. The goal is to centralize and optimize these efforts in order to quickly deliver solutions to the community.

• Quickly enable remediation for high-impact problems for developers
• Unblock business application flows
• Resolve world-wide developer problems, cyber security breaches in an effective centralized way 

Key Responsibilities: 

• Lead technical engineer in an experts team of cyber security leads
• Explore and resolve key cyber security gaps and drive resolution that is fit
• Develop modules that resolve identified gaps in a centralized optimized manner such as : credential mgnt , authentication , authorization , end to end scanning tools
• Identify security risks in an architecture and translate them into proposed resolutions for delivery by this team
• Interact with security engineering and SOC/IR teams to ensure controls are meeting the intended goal and that the process is effective and well suited to the way ICG developers want to work.
• Evaluate third party services, systems, tools, libraries and solutions.
• Continual self-study to keep up to date on new threat and attack methods
• Demonstrate threats or risks via live demo or written narrative.
• Acting as an advisor and expert lead to development teams to help them improve their expertise. 

Characteristics: 

• Self-motivated with the ability to work independently and as a team member with minimal direction
• Excellent communicator who gets on well with others, building strong professional relationships
• Able to negotiate and influence at all levels
• Collaborative by nature, builds partnerships across the firm
• Strong desire to learn and contribute solutions and ideas to broader team
• Creative and innovative, brings different angles to problems and provides new solutions Risk and security focused, putting diligent risk management and security at the core of everything they do 

Experience: 

• Expertise of cyber security, demonstrated by previous roles in the domain and industry certification
• Good understanding of security capabilities supporting application development such as authentication,authorization, credential management , certificate management , encryption for on prem and cloud
• Understanding of container orchestration technologies
• Hands-on experience developing high-performance solutions following Agile methodologies ideally backend Java experience
• Containers K8s hands on experience understanding the lifecycle of a containers and integration with security boundaries-advantage
• Threat modeling experience including architecture definitions, threats , risks – advantage
• Intimate knowledge of the development process, ideally from working in and/or leading development teams in a banking environment

-------------------------------------------------

Job Family Group:

Technology

-------------------------------------------------

Job Family:

Applications Development

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting