C

Citi

Runs banking and payments for global clients

Forward Deployed AI Engineer for Cyber Security

AI Application EngineeringConfirmed live in the last 24 hours
Full-timeBudapest, HungaryHUF12.2M - HUF28.8M

About the Job

Requirements

  • Hands-on experience building LLM-powered systems, including prompt engineering, retrieval-augmented generation architectures, structured outputs, and tool or function calling, beyond simply consuming commercial chat assistants.
  • Foundational knowledge in either Application Security, including OWASP Top 10, static and dynamic application security testing, and secure code review, or Security Operations, including security operations center alert triage, SIEM workflows, and incident analysis.
  • For the Vice President level, proven experience architecting, building, and evaluating production tool-using agentic systems, including multi-step orchestration, retrieval-augmented generation, robust guardrail implementations, and systematic evaluation frameworks for model accuracy, latency, and reliability.
  • For the Vice President level, strong technical depth in either Offensive/Application Security or Detection/Security Operations Center, combined with working fluency and cross-functional understanding in the other domain.

Responsibilities

  • Architect, develop, and operationalize end-to-end AI applications, tool-augmented agents, and retrieval-augmented generation pipelines for cybersecurity workflows, including automated vulnerability remediation, intelligent security operations center triage, static and dynamic application security testing triage automation, and detection engineering.
  • Work directly with security practitioners, including application security engineers, security operations center analysts, incident responders, and penetration testers, to understand operational bottlenecks and translate security requirements into working AI software solutions.
  • Design autonomous, evaluated, tool-using agent frameworks that interact securely with enterprise APIs, security scanners, SIEM/SOAR platforms, code repositories, and containerized infrastructure.
  • Establish evaluation frameworks that benchmark latency, accuracy, faithfulness, hallucination, and tool-call precision, and implement input and output guardrails to ensure robust, deterministic behavior.
  • Write clean, modular, production-ready Python code; package applications into containerized microservices; and deploy them through automated CI/CD pipelines in accordance with enterprise security and architecture standards.
  • Apply secure coding practices and implement defenses against AI-specific attack vectors, including prompt injection, model abuse, data leakage, and insecure tool execution.
  • Standardize reusable AI components, evaluation patterns, and integration libraries across the broader CISO engineering organization to accelerate enterprise-wide adoption.

Desired Qualifications

  • For the Assistant Vice President level, 4–7+ years of software engineering experience, strong proficiency in Python, and a track record of shipping production services or pipelines, including REST APIs, microservices, containerization with Docker or Kubernetes, and CI/CD.
  • Hands-on experience with application security tools such as Semgrep, CodeQL, Snyk, or Burp Suite, or enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, or Google Chronicle.
  • Familiarity with detection engineering, the MITRE ATT&CK framework, and common AI attack surfaces such as prompt injection, jailbreaking, and OWASP Top 10 for LLMs.
  • For the Vice President level, 8–10+ years of software engineering experience, deep Python expertise, and a track record of architecting, shipping, and owning production systems end-to-end.
  • Foundational security certifications such as OSCP, GWAPT, GPEN, or GCIH.
  • Strong awareness of AI security risks, including prompt injection, model poisoning, model abuse, and data leakage; hands-on fine-tuning or adaptation experience; and SOAR automation workflow development.

About the Company

Citi

Runs banking and payments for global clients

Citi runs banking, investment and payment services for companies, governments and individuals around the world. Its global network connects institutions with local banking systems, while its US consumer business sells credit cards and deposit accounts. Corporate clients use Citi to manage cash, finance trade and raise capital, and investors use its trading, custody and wealth services to hold and manage assets. The bank earns interest on loans and fees from payments, securities transactions, financial advice and account services. Citi traces its banking roots to 1812; the Citigroup holding company was formed in 1998, and its headquarters are in New York City.

Company size
10,001+
Company stage
IPO
Headquarters
New York City, New York
Founded
1812

Recently Posted Jobs

Explore more opportunities at Citi

See more jobs