Internal Tooling Adoption & Developer Feedback
Actively pilot, adopt, and demonstrate internal developer tools, IDE security plugins, automated PR bots (e.g., Dependabot/Renovate patterns), and local scanning utilities within engineering squads.
Troubleshoot false positives, scanner configuration errors, and build pipeline failures; provide direct, actionable feedback to internal platform and tooling teams to improve developer experience.
Required Qualifications & Experience
Education & Experience Requirements
Bachelor's Degree in Computer Science, Software Engineering, Information Systems, or related technical field.
4-7 years of hands-on software development and engineering experience delivering enterprise web applications, microservices, or distributed backend systems.
Proven track record of directly fixing static code vulnerabilities (SAST) and managing third-party dependency/package upgrades in production environments.
Practical, hands-on experience containerizing applications and working with container orchestration platforms (Docker, Kubernetes, OpenShift).
Technical Proficiencies
Core Programming Languages: Strong, hands-on development proficiency in at least one or two primary enterprise languages: Java (Spring Boot), Python, Go, C#/.NET, or TypeScript/Node.js .
Static Code Analysis (SAST): Ability to analyze and fix scanner findings from tools such as SonarQube, Checkmarx, Veracode, or Fortify .
Dependency & Package Management: Practical experience with dependency resolution and build tools: Maven, Gradle, npm/yarn, NuGet, pip/Poetry, or Go modules , alongside SCA tools like Snyk, Black Duck, or JFrog Xray .
Containers & Runtime: Hands-on experience creating production-grade Dockerfile s, managing multi-stage builds, patching container base images, and deploying to Kubernetes or OpenShift .
CI/CD & Version Control: Proficient with Git , branching strategies (Gitflow/trunk-based), and pipeline configurations (e.g., Jenkins, GitHub Actions, Tekton, GitLab CI, Harness).
Core Competencies & Working Style
Competency
Behavioral Expectation
Hands-On Craftsmanship
Loves writing code, debugging builds, untangling messy dependency trees, and seeing clean PRs merged to production.
Developer-to-Developer Empathy
Speaks the language of squad engineers, troubleshoots shoulder-to-shoulder, and offers practical solutions rather than abstract advice.
Pragmatic Problem Solver
Able to quickly find safe workarounds or code refactors when direct library upgrades introduce breaking API changes.
Clear Communication
Explains the "why" and "how" of security fixes clearly in PR comments, documentation, and pairing sessions.
Key Performance Indicators (Success Metrics)
Direct Remediation Output: Number of validated PRs merged and critical/high vulnerabilities (SAST & SCA) successfully resolved across assigned services.
Same-Day Hotfix Readiness: Number of application components successfully containerized and equipped with automated verification pipelines capable of same-day hotfix releases.
Turnaround Time for Technical Reviews: Fast, reliable review turnaround for application remediation plans and contractor pull requests.
Build & Release Optimization: Measurable reduction in build and deployment friction for patched releases within supported application squads.
Job Family Group:
Technology
Job Family:
Applications Development
Time Type:
Full time
Primary Location:
New York New York United States
Primary Location Full Time Salary Range:
$142,320.00 - $213,480.00
In addition to salary, Citi's offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.
Most Relevant Skills
Please see the requirements listed above.
Other Relevant Skills
For complementary skills, please see above and/or contact the recruiter.
Anticipated Posting Close Date:
Nov 06, 2026
Automated Processing and AI
We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.
Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.
Illinois residents - AI Notice and Right (https://tbcdn.talentbrew.com/company/287/cms/v3/docs/policies/Illinois\Career\Supplement_a11y.pdf)
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi (https://www.citigroup.com/citi/accessibility/application-accessibility.htm) .
View Citi's EEO Policy Statement (https://www.citigroup.com/global/eeo-aa-policy) and the Know Your Rights (https://www.eeoc.gov/sites/default/files/2023-06/22-088\EEOC\KnowYourRights6.12ScreenRdr.pdf) poster.
Citi is an equal opportunity and affirmative action employer.
Minority/Female/Veteran/Individuals with Disabilities/Sexual Orientation/Gender Identity.
