DevSecOps Software Engineering Expert

Citigroup Inc.; Greater London; Hybrid; GBP 120,000 - 150,000; Full time

Benefits offered by this job

27 days annual leave

Discretional annual bonus

Private Medical Care & Life Insurance

Employee Assistance Program

Pension Plan

Parental Leave

Learning resources

Job summary

Citi is seeking a security-focused infrastructure and tooling leader to embed security and best practices into the development lifecycle, focusing on vulnerability management and security platform contributions. This role spans all Tech/CIO orgs, with potential hybrid work opportunities and impact on budgets and developer efficiency.

You will lead DevSecOps services, promote new engineering approaches in security and tooling, and mentor teams while contributing to open-source security solutions.

Qualifications

• Proven leadership in DevSecOps and security-focused engineering.
• Expert knowledge of Java/Spring and related technologies.
• Expert knowledge in VA, SAST and CVM domains.
• Expert knowledge in DevOps/DevSecOps domains.
• Open-source software contribution/maintenance experience.
• Proficiency in evaluating and benchmarking AI agent skills.
• Proven track record leading technical teams on complex projects.

Responsibilities

• Leading technical direction for DevSecOps services.
• Driving adoption of new engineering approaches in security and tooling.
• Contributing to and maintaining open-source software for vulnerability remediation.
• Deep expertise in DevSecOps, modern frameworks, and AI-enabled development tools.
• Highly skilled in QA automation and infrastructure optimization.

Skills

DevSecOps leadership

Security architecture

Team leadership

Open-source contributions

AI-enabled development tools

Education

Bachelor's degree or equivalent experience

Master's degree preferred

Tools

OpenShift

Checkmarx

SonarQube

SBOM (CycloneDX)

Security tooling automation

Job description

Engineer the future of global finance. At Citi, our Tech team doesn’t just support finance – we are helping to redefine it. Every day, $5 trillion crosses through our network. We do business in 180+ countries operating at a scale few can match. From deploying advanced AI to helping shape global markets, we build systems that matter. Look to join a team where your work helps influence economies, your ideas can drive innovation and outcomes, and your growth is backed by mentorship, continuous learning and flexibility with potential hybrid work opportunities. Help solve real-world challenges that touch millions and get the opportunity to build the future of finance with Citi Tech.

This role is a security-focused infrastructure and tooling leader. Their primary goal is to embed security and operational best practices into the development lifecycle, with a strong emphasis on vulnerability management, security platforms, and contributing to open-source security solutions. This would impact all of the Products & Functions Technology LOBs/CIO organisations and ultimately would result in dollar budget savings through reduced developer effort.

Full time

Key Platforms & Technologies

• Java / Spring / TypeScript / Go / Kafka / PostgreSQL / OpenShift
• OpenRewrite recipe automations
• CycloneDX SBOM standard
• Checkmarx / Sonar
• Synthetic observability solutions

Key Responsibilities/Expertise

• Leading technical direction for DevSecOps services.
• Driving adoption of new engineering approaches in security and tooling.
• Contributing to and maintaining open-source software for vulnerability remediation.
• Deep expertise in DevSecOps, modern frameworks, and AI-enabled development tools.
• Highly skilled in quality-assurance automation and infrastructure optimization.

Impact Area

• Systematically improves the Products & Functions Tech/CIO organisation's security posture and operational excellence.
• Delivers impact by promoting security standards and enablers across business lines.

Qualifications:

• Proven relevant experience
• Expert knowledge of Java, Spring and related technologies
• Expert knowledge in VA, SAST and CVM domains
• Expert knowledge in DevOps / DevSecOps domains
• Open-source software contribution / maintenance experience
• Proficiency in evaluating and benchmarking AI agent skills
• Proven track record of leading strong technical teams and delivery of highly technical projects with complex architecture

Education:

• Bachelor’s degree/University degree or equivalent experience
• Master’s degree preferred

What we’ll provide you

By joining Citi, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as:

• 27 days annual leave (plus bank holidays)
• A discretional annual performance related bonus
• Private Medical Care & Life Insurance
• Employee Assistance Program
• Pension Plan
• Paid Parental Leave
• Special discounts for employees, family, and friends
• Access to an array of learning and development resources

Visit our About Us | Culture, Values & Benefits page to learn more.

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self, every day. We want the best talent around the world to be energized to join us, motivated to stay and empowered to thrive.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.