Senior Cloud SecOps - EMEA Lead

About Citi:

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

The Team:

The Cloud Security Operations team works in a multi-disciplinary team of teams driving cyber security services and solutions to enable Citi to securely adopt private, hybrid, and public Cloud platforms. This role will serve as primary security interface in EMEA with development teams, architects, engineers, and operational teams involved in Cloud-related projects. Our operating model emphasizes DevSecOps, that is, automation, integration, and agility based on Security as a Service/Security as Code concepts.

What you will do:

• Lead end-to-end security assurance activities including Penetration Testing, Vulnerability Assessments (preproduction, post-production) and Purple Team exercises (Red and Blue team collaboration) in order to identify areas of risk and ensure any gaps are documented and remediated.
• Conduct white box and gray box penetration testing for Cloud systems leveraging technologies like Kubernetes, Docker, and serverless computing.
• Collaborate with security teams (e.g. Threat Modeling and Detection, Identity, Cybersecurity Engineering, etc.) to implement practical security measures on Cloud platforms like AWS Lambda, Azure App Service, and Google Cloud Functions, in alignment to industry standards.
• Stay abreast on the latest threats and security advancements in Cloud computing technologies like VPCs, IAM, and encryption to refine and further optimize white box and gray box penetration testing strategy.
• Understand emerging and existing threats across AWS, GCP, and Azure and assess Citi’s defensive posture against these threats including running atomic tests to ensure controls are working as designed.
• Provide threat modeling and risk assessment services to characterize the risk and severity posture of various systems and components in the Cloud environment.
• Partner with Engineering and Operations teams to create, implement, and apply DevSecOps practices and processes that are utilized by developers across all sectors in Citi.
• Supplement Cloud monitoring and vulnerability assessment tool(s) by adding new capabilities, security checks, and automation to existing workflows.
• Identify new requirements/enhancements to standards, tools, and processes.
• Partner with Engineering teams to evaluate and recommend new and emerging products and technologies that will bring enhancements to the overall Cloud security program as needed.

Your profile:

• 8+ years' experience working in offensive security-oriented roles with 4+ years' experience with hands-on Penetration Testing.
• Bachelor's Degree or equivalent working experience.
• Hands-on white box and gray box penetration testing of AWS, Azure, and Google Cloud Platform infrastructure.
• Proven experience with Cloud security concepts/best practices within each Cloud Service Provider (e.g., AWS, GCP, Azure/M365).
• Strong proficiency with securing containers and container orchestration frameworks (such as Kubernetes – EKS, GKE, OpenShift).
• Deep Understanding of MITRE ATT&CK and attacker TTPs.
• Programming/Scripting languages are a plus (especially Python).
• Infrastructure as Code (IaC) experience is a plus (especially Terraform).
• Ability to deliver presentations to senior leaders and peer organizations in both a technical and non-technical manner.
• Demonstrated ability to take ownership and follow up on issues.
• Advanced analytical and problem-solving skills.
• Consistently clear and concise written and verbal communication.
• Proficient in interpreting and applying policies, standards, and procedures.
• Fluent English.

​

Candidates must possess or be open to pursuing one or more of the following industry-accredited certifications within the 1st year of employment:

• Cloud security certifications: Azure Security Engineer Associate, Microsoft 365 Certified Security Administrator Associate, AWS Security Specialty, GCP Professional Cloud Security Engineer, etc.
• Container/Kubernetes certifications: CKA, CKAD, CKS, etc.
• Other security certifications: OSCP, OSCE, GXPN, GPEN, GCIH, GWAPT, etc.

What we can offer you:

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program
• Home Office Allowance (for colleagues working in hybrid work models)
• Paid Parental Leave Program (maternity and paternity leave)
• Private Medical Care Program and onsite medical rooms at our offices
• Pension Plan Contribution to voluntary pension fund
• Group Life Insurance
• Employee Assistance Program
• Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
• Flexible work arrangements to support you in managing work - life balance
• Career progression opportunities across geographies and business lines
• Socially active employee communities with diverse networking opportunities

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day.  We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive. 

Sounds like Citi has everything you need? Then apply to discover the true extent of your capabilities.

#LI-AH4

#LI-BP2

------------------------------------------------------

Job Family Group:

------------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting