{"id":3689123,"url":"https://alion.io/job/citi-senior-software-engineer-technical-remediation-enablement-3","title":"Senior Software Engineer – Technical Remediation & Enablement","company":{"id":7841,"name":"Citi","domain":"citi.com","url":"https://alion.io/company/citi","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":97,"open_postings":578,"ghost_share":0.01,"stale_share":0.265,"repost_share":0.066,"time_to_fill_p50_days":9,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"C#","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CVE","optional":false},{"name":"Dependabot","optional":false},{"name":"Docker","optional":false},{"name":"Fortify","optional":false},{"name":"Git","optional":false},{"name":"Gitflow","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"Gradle","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"JFrog Xray","optional":false},{"name":"Kubernetes","optional":false},{"name":"Maven","optional":false},{"name":"Node JS","optional":false},{"name":"npm","optional":false},{"name":"OpenShift","optional":false},{"name":"Poetry","optional":false},{"name":"Python","optional":false},{"name":"Renovate","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Spring Boot","optional":false},{"name":"SQL","optional":false},{"name":"Tekton","optional":false},{"name":"Trunk-Based Development","optional":false},{"name":"TypeScript","optional":false},{"name":"Veracode","optional":false},{"name":"Java","optional":true}],"status":"closed","first_seen_at":"2026-11-03T15:57:38Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-09T10:03:08Z","board_verified":false,"closed_at":"2026-11-09T10:03:08Z","days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"The Senior Software Engineer - Technical Remediation & Enablement Lead is a hands-on, code-level technical specialist responsible for driving the direct remediation of software vulnerabilities across enterprise application teams. This individual contributor / team-level technical lead works alongside application developers and contractor engineers to fix static code vulnerabilities (SAST), patch vulnerable software dependencies (SCA/third-party libraries), containerize workloads, and streamline local build/release pipelines to achieve same-day vulnerability hotfix and deployment capabilities.\nThis role combines active software engineering (writing/refactoring code and debugging pipelines) with technical enablement, guiding squad developers on how to adopt internal security and build tools, resolve tricky dependency conflicts, and package applications into modern containers for rapid, low-risk production releases.\nWhat you’ll do\nHands-On Code Remediation & Dependency Patching\nWrite, refactor, and review application code to directly remediate static code analysis (SAST) findings (e.g., SQL/command injection, cross-site scripting, insecure deserialization, improper error handling, weak cryptography).\nResolve complex third-party library and framework upgrades (SCA/CVE remediation), managing transitive dependency conflicts, breaking API changes, and version incompatibilities across Java, Python, Go, .NET, or JavaScript/TypeScript stacks.\nImplement targeted automated unit, integration, and regression tests to validate that code fixes and patched libraries do not introduce functional regressions.\nContainerization & Same-Day Release Enablement\nWork directly in application repositories to write and optimize Dockerfile s, container manifests, and base image configurations (Docker, OCI, Kubernetes/OpenShift).\nAssist application squads in containerizing non-containerized legacy services, establishing minimal base images and automated base-image rebuild triggers for same-day OS/runtime patching.\nHelp configure and fine-tune CI/CD build scripts and release pipelines to compress deployment cycle times and eliminate manual deployment steps for emergency hotfixes.\nApplication Plan Technical Validation\nPerform code-level reviews of proposed remediation plans from application teams, verifying whether proposed library version bumps or refactored logic effectively eliminate the root cause of the vulnerability.\nIdentify technical prerequisites (e.g., test coverage gaps, build tool upgrades, compiler/runtime updates) needed before a team can successfully patch and release.\nContractor Squad Pairing & PR Review\nAct as a peer reviewer and technical guide for external contractor engineers assigned to assist with remediation work.\nReview contractor-submitted pull requests (PRs) for code cleanliness, security correctness, test coverage, and enterprise architectural standards.\nFacilitate smooth technical onboarding and repository access for contractor developers.\nInternal Tooling Adoption & Developer Feedback\nActively pilot, adopt, and demonstrate internal developer tools, IDE security plugins, automated PR bots (e.g., Dependabot/Renovate patterns), and local scanning utilities within engineering squads.\nTroubleshoot false positives, scanner configuration errors, and build pipeline failures; provide direct, actionable feedback to internal platform and tooling teams to improve developer experience.\nWhat we’ll need from you\nEducation & Experience RequirementsBachelor’s Degree in Computer Science, Software Engineering, Information Systems, or related technical field.\n 4-7 years of hands-on software development and engineering experience delivering enterprise web applications, microservices, or distributed backend systems.\nProven track record of directly fixing static code vulnerabilities (SAST) and managing third-party dependency/package upgrades in production environments.\nPractical, hands-on experience containerizing applications and working with container orchestration platforms (Docker, Kubernetes, OpenShift).\n\nTechnical ProficienciesCore Programming Languages: Strong, hands-on development proficiency in at least one or two primary enterprise languages: Java (Spring Boot), Python, Go, C#/.NET, or TypeScript/Node.js.\n Static Code Analysis (SAST): Ability to analyze and fix scanner findings from tools such as SonarQube, Checkmarx, Veracode, or Fortify.\nDependency & Package Management: Practical experience with dependency resolution and build tools: Maven, Gradle, npm/yarn, NuGet, pip/Poetry, or Go modules, alongside SCA tools like Snyk, Black Duck, or JFrog Xray.\nContainers & Runtime: Hands-on experience creating production-grade Dockerfile s, managing multi-stage builds, patching container base images, and deploying to Kubernetes or OpenShift.\nCI/CD & Version Control: Proficient with Git, branching strategies (Gitflow/trunk-based), and pipeline configurations (e.g., Jenkins, GitHub Actions, Tekton, GitLab CI, Harness).\n\nCore CompetenciesHands-On Craftsmanship: Loves writing code, debugging builds, untangling messy dependency trees, and seeing clean PRs merged to production.\nDeveloper-to-Developer Empathy: Speaks the language of squad engineers, troubleshoots shoulder-to-shoulder, and offers practical solutions rather than abstract advice.\nPragmatic Problem Solver: Able to quickly find safe workarounds or code refactors when direct library upgrades introduce breaking API changes.\nClear Communication: Explains the \"why\" and \"how\" of security fixes clearly in PR comments, documentation, and pairing sessions.\n\n Key Performance Indicators (Success Metrics) Direct Remediation Output: Number of validated PRs merged and critical/high vulnerabilities (SAST & SCA) successfully resolved across assigned services.\nSame-Day Hotfix Readiness: Number of application components successfully containerized and equipped with automated verification pipelines capable of same-day hotfix releases.\nTurnaround Time for Technical Reviews: Fast, reliable review turnaround for application remediation plans and contractor pull requests.\nBuild & Release Optimization: Measurable reduction in build and deployment friction for patched releases within supported application squads.\n\nWhat we can offer you\nWe work hard to have a positive financial and social impact on the communities we serve. In turn, we put our employees first and provide the best-in-class benefits they need to be well, live well and save well.\nBy joining Citi London, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as:\nGenerous holiday allowance starting at 27 days plus bank holidays; increasing with tenure \nA discretional annual performance related bonus \nPrivate medical insurance packages to suit your personal circumstances \nEmployee Assistance Program \nPension Plan \nPaid Parental Leave \nSpecial discounts for employees, family, and friends \nAccess to an array of learning and development resources \nAlongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.\nSounds like Citi has everything you need? Then apply to discover the true extent of your capabilities.\n------------------------------------------------------\nJob Family Group:\nTechnology------------------------------------------------------\nJob Family:\nApplications Development------------------------------------------------------\nTime Type:\nFull time------------------------------------------------------\nMost Relevant Skills\nPlease see the requirements listed above.------------------------------------------------------\nOther Relevant Skills\nFor complementary skills, please see above and/or contact the recruiter.------------------------------------------------------\nCiti is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.\nIf you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.\nView Citi’s EEO Policy Statement and the Know Your Rights poster.","description_format":"text","description_chars":8588,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance","Hybrid work","Parental leave"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Wealth Management & Financial Advisors","Payment Processing & Gateways","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-11-03T15:57:38Z"},{"event":"close","at":"2026-11-09T10:03:08Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Graduate Trainee, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Global Business Mobility: Graduate Trainee; Skilled Worker","cap_exempt":false,"checked_at":"2026-11-10T06:21:00+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":null,"pay":null,"html_url":"https://alion.io/job/citi-senior-software-engineer-technical-remediation-enablement-3","json_url":"https://alion.io/job/citi-senior-software-engineer-technical-remediation-enablement-3.json","meta":{"generated_at":"2026-11-10T11:30:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26721,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7841},"rest":"https://alion.io/mcp/rest/get_company?id=7841"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fciti-senior-software-engineer-technical-remediation-enablement-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fciti-senior-software-engineer-technical-remediation-enablement-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fciti-senior-software-engineer-technical-remediation-enablement-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/citi-senior-software-engineer-technical-remediation-enablement-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fciti-senior-software-engineer-technical-remediation-enablement-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3689123}},{"tool":"search_jobs","arguments":{"company":"citi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3689123},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}