Senior Lead Penetration Testing Specialist, Citi

Citi

Location:
United States, Fort Lauderdale

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

145840.00 - 218760.00 USD / Year

Save Job

Apply Position

Job Description:

Senior Lead Penetration Testing Specialist (AI Solutions) is a pivotal, cross-functional role responsible for leading in-depth analysis and research into new vulnerabilities and exploits, and for identifying systemic issues within mission-critical Citi applications. Leveraging advanced AI development skills, this role will also be instrumental in designing, developing, and implementing cutting-edge AI-powered tools and solutions to significantly enhance our vulnerability assessment and penetration testing capabilities.

Job Responsibility:

Perform in-depth analysis and research of new vulnerabilities and exploits
Develop proof-of-concept code
Act as subject matter expert in offensive information security, application pentesting, networking, operating systems, and databases
Research and identify potential security issues within Citi Applications
Drive remediation by outlining defense-in-depth approach
Provide strategic solutions to developers on effective security controls
Contribute to architecture, design, and development of advanced AI tooling for vulnerability detection and code analysis
Collaborate with cross-functional teams to integrate AI capabilities
Design and implement user-friendly interfaces for AI-powered security tools
Conduct testing and evaluation of AI models and tools
Report and articulate results
Review internal tools and testing processes
Mentor and guide junior security analysts

Requirements:

10+ years of professional experience in an Information Security or Cybersecurity role
Proficient in Manual Application Penetration Testing and Threat Modeling
Hands-on experience using Security tools (e.g., BurpSuite, AppScan, Qualys, Nessus, CheckMarx, BlackDuck, Snyk)
Deep knowledge of industry standards (e.g., OWASP Top 10, CWE/SANS Top 25)
Strong understanding of Application Architectures (Microservices, REST APIs, SOA, MVC)
Strong understanding of Development Frameworks (Spring, Struts, AngularJS, NodeJS)
Strong understanding of Application Infrastructure (web/app servers, middleware components, databases, public/private/hybrid cloud deployment, cloud service models)
Strong understanding of Software Development Methodologies (Agile, DevOps, Waterfall)
Hands-on experience with Programming/Scripting Languages (Java, .NET/C#, C/C++, Python, Ruby)
Hands-on experience with advanced AI related technologies (Large Language Models, Agentic AI Architecture, MCP server/clients, RAG integrations, frameworks like LangChain, RAG, PyTorch, TensorFlow, Haystack)
Proficient in vulnerability discovery, analysis, and exploitation
Passion for security research
Understand CVEs and able to reproduce proof-of-concept
Experience in developing AI-powered applications and tools
Excellent problem-solving skills
Effective communication skills
Bachelor's degree in Computer Science, Cyber Security, Artificial Intelligence, or related fields

Nice to have:

Multiple years of professional experience in an Artificial Intelligence (AI) Development role
Contributions to open-source AI or security projects
Industry-accredited security certification (GIAC GWEB, GWAPT, GMOB, GPEN, GXPN, OSCP, OSWE, CISSP, AI/ML certifications)
Master's Degree in Computer Science, Cyber Security, Artificial Intelligence, or related field

What we offer:

Medical, dental & vision coverage
401(k)
Life, accident, and disability insurance
Wellness programs
Paid time off (vacation, sick leave, paid holidays)
Discretionary and formulaic incentive and retention awards

Additional Information:

Job Posted:
November 08, 2025

Expiration:
November 12, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Senior Lead Penetration Testing Specialist