FAQs
What is the job title for this position?
The job title is Application Penetration Tester - AVP (Hybrid).
What kind of experience is required for this role?
The role requires 5-8 years of relevant experience, specifically in penetration testing with a focus on application security.
What technical skills are necessary for this position?
Necessary technical skills include hands-on experience using security tools (like Burp Suite, AppScan, WebInspect, Qualys), knowledge of OWASP Top 10, Scripting languages for automation (preferably Python), and understanding application architecture and functionalities.
Are there any certifications that are required or preferred for this role?
While not mandatory, candidates must have or be willing to obtain industry-accredited security certifications such as GIAC GWAPT, GPEN, OSCP, or CISSP.
What types of applications will the penetration testing team work on?
The penetration testing team will conduct vulnerability assessments on various Citi applications, including Web, Mobile, Thick Client, and APIs.
What are the core responsibilities of this position?
Core responsibilities include acting as a subject matter expert in offensive security, driving remediation efforts, reporting and articulating vulnerability assessment results, and contributing to process improvement and automation.
What level of education is required for this position?
A Bachelor’s degree or equivalent experience is required for this position.
How important are communication skills for this role?
Strong communication skills, both written and verbal, are essential for reporting and articulating vulnerability assessment results to various audiences.
Is Citi an equal opportunity employer?
Yes, Citi is an equal opportunity and affirmative action employer, and qualified applicants will receive consideration without regard to various protected statuses.
What is the job family group for this position?
The job family group for this position is Technology, with a focus on Information Security.