Citi
Senior Application Security Analyst, Vice President
Citi, Irving, Texas, United States, 75084
Senior Application Security Analyst (VP)
As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. Our
Enterprise Operations & Technology
teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful.
Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks.
Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.
Responsibilities:
Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
Review and validate automated testing results and prioritize actions that resolve issues based on overall risk.
Perform manual source code review for security vulnerabilities.
Identify opportunities to automate and standardize information security controls.
Write formal security assessment reports for each application.
Collaborate with application teams to ensure that any identified security vulnerabilities are remediated in a timely manner.
Manage and execute security assessments for multiple projects simultaneously.
Research and explore new testing tools and methodologies.
Participate in research and knowledge sharing discussions with the broader Vulnerability Assessments organization.
Assess risk when business decisions are made, demonstrating consideration for the firm's reputation.
Qualifications:
At least 5 years of relevant experience in web development, source code review, or application security testing.
Basic understanding of application security and associated vulnerabilities.
Development background in Java/J2EE, C#, .NET in an enterprise environment.
Development experience with modern JavaScript frameworks, Python, JSON, Lambda.
Good understanding of the Software Development Life Cycle.
Experience using ALM and CICD tools like Bitbucket, TFS, Jenkins, or related tools.
Familiarity with static analysis and application pen-testing techniques.
Experience using commercial enterprise automated security testing tools such as Checkmarx, Snyk, Fortify, etc.
Knowledge with mobile platforms and languages including Android, Kotlin, Objective-C, Swift is a plus.
Experience using or testing cloud platforms (AWS, Google, Azure, etc.) is a plus.
Proven influencing and relationship management skills.
Consistently demonstrates clear and concise written and verbal communication.
Professional certifications, such as CISSP, CSSLP, GIAC, CEH, or willingness to obtain.
Education:
Bachelor’s degree in technology, Computer Science, Engineering, or related field.
Master’s degree is a plus.
Critical Competencies:
Enterprise Application development using Java/J2EE, Spring.
Application Security Testing and Source Code Review.
About Citi
Citi is a preeminent banking partner for institutions with cross-border needs, a global leader in wealth management and a valued personal bank in its home market of the United States.
Job Family Group:
Technology
Job Family:
Information Security
Time Type:
Full time
Primary Location:
Irving Texas United States
Primary Location Full Time Salary Range:
$125,760.00 - $188,640.00
Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs.
Anticipated Posting Close Date:
Aug 21, 2024
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
#J-18808-Ljbffr
As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. Our
Enterprise Operations & Technology
teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful.
Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks.
Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.
Responsibilities:
Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
Review and validate automated testing results and prioritize actions that resolve issues based on overall risk.
Perform manual source code review for security vulnerabilities.
Identify opportunities to automate and standardize information security controls.
Write formal security assessment reports for each application.
Collaborate with application teams to ensure that any identified security vulnerabilities are remediated in a timely manner.
Manage and execute security assessments for multiple projects simultaneously.
Research and explore new testing tools and methodologies.
Participate in research and knowledge sharing discussions with the broader Vulnerability Assessments organization.
Assess risk when business decisions are made, demonstrating consideration for the firm's reputation.
Qualifications:
At least 5 years of relevant experience in web development, source code review, or application security testing.
Basic understanding of application security and associated vulnerabilities.
Development background in Java/J2EE, C#, .NET in an enterprise environment.
Development experience with modern JavaScript frameworks, Python, JSON, Lambda.
Good understanding of the Software Development Life Cycle.
Experience using ALM and CICD tools like Bitbucket, TFS, Jenkins, or related tools.
Familiarity with static analysis and application pen-testing techniques.
Experience using commercial enterprise automated security testing tools such as Checkmarx, Snyk, Fortify, etc.
Knowledge with mobile platforms and languages including Android, Kotlin, Objective-C, Swift is a plus.
Experience using or testing cloud platforms (AWS, Google, Azure, etc.) is a plus.
Proven influencing and relationship management skills.
Consistently demonstrates clear and concise written and verbal communication.
Professional certifications, such as CISSP, CSSLP, GIAC, CEH, or willingness to obtain.
Education:
Bachelor’s degree in technology, Computer Science, Engineering, or related field.
Master’s degree is a plus.
Critical Competencies:
Enterprise Application development using Java/J2EE, Spring.
Application Security Testing and Source Code Review.
About Citi
Citi is a preeminent banking partner for institutions with cross-border needs, a global leader in wealth management and a valued personal bank in its home market of the United States.
Job Family Group:
Technology
Job Family:
Information Security
Time Type:
Full time
Primary Location:
Irving Texas United States
Primary Location Full Time Salary Range:
$125,760.00 - $188,640.00
Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs.
Anticipated Posting Close Date:
Aug 21, 2024
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
#J-18808-Ljbffr