Senior Penetration Tester (Cyber Security) Vice President
Core
Conduct deep-dive whitebox penetration testing, vulnerability research, and source code review to identify and exploit security flaws in Citi's web, mobile, and API applications.
Role type
Senior IC penetration tester (whitebox & vulnerability research)
Builds
Security posture of enterprise applications, systems, and third-party components
Domain
Financial services / Application Security
Required skills
Whitebox penetration testing, vulnerability research, source code review, exploit development, SAST/DAST tooling, secure coding practices, OWASP Top 10, API security
Preferred skills
Third-party component analysis, AI-augmented static analysis, tool development
Technologies
Java, C#, Python, JavaScript, SAST tools, DAST tools
Responsibilities
Conduct in-depth vulnerability research to discover zero-day vulnerabilities; Perform comprehensive whitebox penetration tests leveraging source code; Conduct manual and automated source code reviews; Evaluate security of third-party libraries and frameworks; Provide actionable remediation recommendations to development teams; Develop and contribute to advanced security testing tools; Prepare detailed technical reports for technical and non-technical audiences
Seniority
Senior, hands-on IC
