Full-timeTech & engineering· Posted 28 Jan

Vulnerability Research (Principal Application Security Analyst - Senior Vice President)

CitiFrom company site

Salary

Not stated by the company

When

Full-time hours

Where

Singapore

Apply on company site

How well do you match? See it now →

Free with a WorkJio account: we compare your profile with this job and show what you already meet.

Share with a friend

Start: Not stated
Work mode: On-site
Experience: Experienced

About the role

Citi is hiring a principal application security analyst to join its Offensive Security & Vulnerability Management team in Singapore. This role focuses on deep-dive penetration testing across web, mobile, thick client and API applications, and it suits a seasoned security professional who enjoys hands-on vulnerability research and whitebox testing.

What you'll do

Research and uncover new attack vectors and zero-day flaws in enterprise applications, systems and third-party components, and build proof-of-concept exploits to show risk.
Carry out whitebox penetration tests using source code, design documents and internal system knowledge to find sophisticated flaws.

Know someone for this? Share it

WhatsApp Telegram Facebook LinkedIn

Perform manual and automated source code reviews in languages such as Java, C#, Python and JavaScript to spot vulnerabilities, misconfigurations and secure coding gaps.

Assess the security of third-party libraries, frameworks and open-source components, including known CVEs and their potential risks.

Give development teams clear, actionable remediation advice on secure coding, configuration and architecture.

Use and help build advanced security testing tools, including SAST and DAST solutions, to improve efficiency and coverage.

Prepare detailed technical reports covering findings, risk levels and recommended mitigations for technical and non-technical readers.

Mentor junior penetration testers and security engineers on vulnerability research, source code analysis and whitebox testing.

Keep up to date with the latest security threats, vulnerabilities, attack techniques and industry best practices.

Good to know

Full-time role based in Singapore.

Requirements

8+ years in penetration testing, ethical hacking or application security, with a strong whitebox testing or source code review focus
Proven vulnerability research skills, including finding novel flaws and developing reliable exploits
Strong proficiency in at least one major programming language such as Java, C# or Python, and familiarity with others
In-depth knowledge of OWASP Top 10 web application vulnerabilities and API security best practices
Experience with SAST and DAST tools
Understanding of cloud platforms (AWS, Google Cloud, Azure) and securing applications and infrastructure there

Jio can write this application for you

Jio reads this job and your profile, then writes a short letter in your words. You read it, change anything, and send it yourself. Nothing is sent until you say so.

Apply on the company website

You will leave WorkJio. Never pay a fee or share your Singpass password, OTP or bank log-ins to apply.

Open application

Listed from Citi’s own careers page and not yet verified by WorkJio. You apply on the company’s site. See all their roles.

Is this your company? Roles that show a salary rank higher on WorkJio. Claim or remove this listing

Vulnerability Research (Principal Application Security Analyst - Senior Vice President)

About the role

What you'll do

Good to know

Requirements

More jobs like this

Designer, Data Programme

Senior iOS Engineer - Spend

Product Manager, Enterprise Mobile

Physical Failure Analysis (PFA) Technician

Job Posting Title TECHNICIAN, PROCESS AND EQUIPMENT (POST WAFER FABRICATION)

[LTA-DPO] SNR MANAGER, PAYMENT TECHNOLOGY (MOTORING DIGITAL TRANSFORMATION)