About CitiCiti, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Technology &amp; Business Enablement teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience.Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.Overview of the Organization:At Citi, trust is paramount, and safeguarding our customer data is a core commitment. The Chief Information Security Office (CISO) is comprised of deeply dedicated and talented professionals focused on ensuring the safety of Citis and its clients assets and information. We manage information security as an end-to-end program, grounded in modern control and security frameworks, fully aligned with firm technology, and driven by threat intelligence and data. Our global security program is deeply integrated across all Citi businesses.Overview of the Role:The Advanced Pentesting and Research team, a vital component of Citis Cyber Security Operations, provides critical security testing services that enable the rapid and secure delivery of solutions to our customers.The Lead Application Security Specialist is a pivotal, cross-functional role responsible for leading in-depth analysis and research into new vulnerabilities and exploits, and for identifying systemic issues within mission-critical Citi applications. Leveraging advanced AI development skills, this role will also be instrumental in designing, developing, and implementing cutting-edge AI-powered tools and solutions to significantly enhance our vulnerability assessment and penetration testing capabilities.We are seeking an innovative, analytical thinker, a collaborative team player, and an effective communicator capable of bridging intricate business, technology, and security requirements. The ideal candidate possesses a deep understanding of modern software development frameworks, AI technologies, complex enterprise architectures, and proactively stays abreast of the ever-evolving cyber security threat landscape.Responsibilities:<ul><li>Perform in-depth analysis and research of new vulnerabilities and exploits. Demonstrate the impact of these through the development of proof-of-concept code.</li><li>Act as a subject matter expert in offensive information security, application pentesting, networking, operating systems, and databases.</li><li>Research and identify potential security issues within Citi Applications</li><li>Drive remediation by outlining a defense-in-depth approach to business stakeholders and providing strategic solutions to developers on effective security controls and counter measures.</li><li>Contribute to the architecture, design, and development of advanced AI tooling to assist with vulnerability detection and code analysis</li><li></li><li>Collaborate with cross-functional teams to integrate AI capabilities into our existing security tools and processes</li><li>Design and implement user-friendly interfaces and workflows for AI-powered security tools</li><li>Conduct thorough testing and evaluation of AI models and tools to ensure their accuracy, reliability, and effectiveness</li><li>Have excellent communication (written and verbal) skills to report and articulate the results.</li><li>Review internal tools, testing processes and methodologies within Application Security space and assist in identifying potential opportunities for improvement and automation.</li><li>Mentor and guide junior security analysts and teams.</li></ul>Qualifications:<ul><li>10+ years of professional experience in an Information Security or Cybersecurity role.</li><li>Proficient in Manual Application Penetration Testing and Threat Modeling, with hands-on experience using Security tools (e.g., BurpSuite, AppScan, Qualys, Nessus, CheckMarx, BlackDuck, Snyk).</li><li>Deep knowledge of industry standards (e.g., OWASP Top 10, CWE/SANS Top 25).</li><li>Strong understanding of a variety of Application Architectures (Microservices, REST APIs, SOA, MVC).</li><li>Strong understanding of a variety of Development Frameworks (Spring, Struts, AngularJS, NodeJS).</li><li>Strong understanding of Application Infrastructure (web/app servers, middleware components, databases, public/private/hybrid cloud deployment, cloud service models - SaaS/PaaS/IaaS).</li><li>Strong understanding of a variety of Software Development Methodologies (Agile, DevOps, Waterfall).</li><li>Hands-on experience with a variety of Programming/Scripting Languages (Java, .NET/C#, C/C++, Python, Ruby).</li><li>Hands-on experience with advanced AI related technologies, such as Large Language Models (LLMs), Agentic AI Architecture, MCP server/clients, RAG integrations, and frameworks like LangChain, RAG, PyTorch, TensorFlow, Haystack, etc.</li><li>Proficient in vulnerability discovery, analysis, and exploitation.</li><li>Passion for security research, demonstrated by published research, active participation in community events, or contributions to the security community.</li><li>Understand CVEs and should be able to reproduce proof-of-concept easily.</li><li>Experience in developing AI-powered applications and tools, preferably in the security domain</li><li>Excellent problem-solving skills and the ability to work in a fast-paced environment.</li><li>Effective communication skills with the capacity to articulate complex security issues to technical and non-technical stakeholders.</li></ul> Preferred Qualifications:<ul><li>Multiple years of professional experience in an Artificial Intelligence (AI) Development role, focusing on developing AI-powered applications and tools for security, and hands-on experience with advanced AI technologies such as Large Language Models (LLMs), Agentic AI Architecture, Retrieval Augmented Generation (RAG) integrations, and frameworks like LangChain, PyTorch, or TensorFlow.</li><li>Contributions to open-source AI or security projects.</li><li>Obtained or be willing to obtain industry-accredited security certification such as: GIAC GWEB, GWAPT, GMOB, GPEN, GXPN, OSCP, OSWE, CISSP, AI/ML certifications.</li></ul>Education:Bachelor’s degree in Computer Science, Cyber Security, Artificial Intelligence, or related fieldsMaster’s Degree in Computer Science, Cyber Security, Artificial Intelligence, or related field preferredAdditional information About Citi may be found at <a href="http://www.citigroup.com/" target="_blank">www.citigroup.com</a> | Twitter: <a href="http://www.twitter.com/citi" target="_blank">@Citi</a> | YouTube: <a href="http://www.youtube.com/citi" target="_blank">www.youtube.com/citi</a> | Blog: <a href="http://blog.citigroup.com/" target="_blank">http://blog.citigroup.com</a> | Facebook: <a href="http://www.facebook.com/citi" target="_blank">www.facebook.com/citi</a> | LinkedIn: <a href="http://www.linkedin.com/company/citi" target="_blank">www.linkedin.com/company/citi</a>.------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Primary Location:Fort Lauderdale Florida United States------------------------------------------------------Primary Location Full Time Salary Range:$145,840.00 - $218,760.00 In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental &amp; vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.------------------------------------------------------Most Relevant Skills Please see the requirements listed above.------------------------------------------------------Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------Anticipated Posting Close Date:Dec 01, 2025------------------------------------------------------Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" target="_blank">Accessibility at Citi</a>. View Citi’s <a href="https://www.citigroup.com/global/eeo-aa-policy" target="_blank">EEO Policy Statement</a> and the <a href="https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf" target="_blank">Know Your Rights</a> poster.