Discover your future at Citi
Working at Citi is far more than just a job. A career with us means joining a team of approximately 219,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.
Job Overview
The Engineer Sr Analyst is an intermediate level position responsible for a variety of engineering activities including the design, acquisition and development of hardware, software and network infrastructure in coordination with the Technology team. The overall objective of this role is to ensure quality standards are being met within existing and planned frameworks.
Responsibilities:
- Contribute to the budgetary requirement definition for assigned product area, develop functional specifications, and create project plans and software release schedules
- Partner with business and development teams to identify engineering requirements and assist in defining application and system requirements and processes and maintain engineering relationships with the end user/client
- Ensure requirements/tasks from technology departments and/or end users are communicated to stakeholders
- Provide solutions and processes in accordance with audit initiatives and requirements and consult with Business Information Security officers (BISOs) and TISOs
- Exhibit in-depth understanding of engineering concepts and principles
- Assist with training activities and mentor junior team members
- Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
Recommended Qualifications: Qualifications:
- 5-8 years of relevant experience in an Engineering role
- Experience working in Financial Services or a large complex and/or global environment
- Project Management experience
- Consistently demonstrates clear and concise written and verbal communication
- Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
- Demonstrated analytic/diagnostic skills
- Ability to work in a matrix environment and partner with virtual teams
- Ability to work independently, prioritize, and take ownership of various parts of a project or initiative
- Ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements
- Proven track record of operational process change and improvement
Education:
- Bachelor’s degree/University degree or equivalent experience
Buscamos un ingeniero DevSecOps sénior altamente cualificado para liderar la integración de prácticas de seguridad en nuestros pipelines de DevOps y en el ciclo de vida de desarrollo de software (SDLC). Este puesto se encargará de diseñar, implementar y mantener sistemas seguros, escalables y automatizados que permitan una entrega de software rápida y fiable, garantizando al mismo tiempo una seguridad sólida y el cumplimiento normativo.
El candidato ideal combina una profunda experiencia en la nube, automatización y seguridad de aplicaciones con experiencia práctica en herramientas modernas de DevSecOps y una sólida base en desarrollo de software.
Estrategia y liderazgo en DevSecOps
Impulsar la adopción de principios DevSecOps y prácticas de seguridad "shift-left" (integración temprana de la seguridad).
Proporcionar liderazgo técnico y mentoría a los equipos de ingeniería.
Promover una cultura sólida de seguridad, automatización y experiencia del desarrollador CI/CD y automatización
Diseñar y operar pipelines de CI/CD seguros utilizando:
GitHub y GitHub Actions
Integrar controles de seguridad automatizados en los pipelines, incluyendo:
SAST con SonarCloud
SCA con Snyk
Escaneo de artefactos y dependencias con JFrog Xray/Curation
Implementar mecanismos de control (guardrails), aplicación de políticas y gobernanza de lanzamientos.
Gestión de artefactos y dependencias
Gestionar y asegurar artefactos utilizando JFrog Artifactory.
Aplicar políticas de integridad, procedencia y vulnerabilidad de los artefactos.
Implementar prácticas seguras en la cadena de suministro de software.
Seguridad en la nube e infraestructura
Diseñar soluciones seguras en la nube (Azure, AWS o GCP).
Implementar Infraestructura como Código (IaC) y aplicar estándares base de seguridad.
Automatizar la gestión de configuraciones utilizando herramientas como Ansible.
Seguridad de aplicaciones y contenedores
Garantizar que el código de la aplicación cumpla con los estándares de codificación segura.
Integrar el escaneo de vulnerabilidades en los flujos de trabajo de desarrollo.
Apoyar estrategias de seguridad de contenedores y protección en tiempo de ejecución (runtime).
Gestión de vulnerabilidades y respuesta a incidentes
Gestionar y realizar el seguimiento de vulnerabilidades utilizando ServiceNow Vulnerability Response.
Colaborar con los equipos de seguridad e ingeniería para priorizar y mitigar riesgos.
Automatizar los flujos de trabajo de triaje, generación de informes y remediación de vulnerabilidades.
Monitorización y observabilidad
Implementar registro de eventos (logging), monitorización y alertas de seguridad.
Apoyar las iniciativas de detección de amenazas y respuesta a incidentes.
Cualificaciones deseables
Experiencia con Kubernetes y ecosistemas de contenedores.
Familiaridad con políticas como código (policy-as-code) y marcos de gobernanza.
Experiencia en la implementación de arquitecturas Zero Trust.
Certificaciones relevantes:
Microsoft Azure Security Engineer
AWS Security Specialty
CISSP, CISM o equivalente
------------------------------------------------------
Job Family Group:
Technology------------------------------------------------------
Job Family:
Systems & Engineering------------------------------------------------------
Time Type:
Full time------------------------------------------------------
Most Relevant Skills
Please see the requirements listed above.------------------------------------------------------
Other Relevant Skills
For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.