As a Forward Deployed AI Engineer for Cyber Security, you will sit at the intersection of applied AI/LLM engineering and enterprise cybersecurity. You will be embedded directly with cybersecurity operational and engineering teams (Application Security, SecOps/SOC, Threat Intelligence, and Vulnerability Management) to build, deploy, and scale production-grade AI systems, LLM-powered pipelines, and autonomous agentic workflows that solve high-impact security challenges.
You are not just integrating APIs or using chat assistants—you are designing and shipping resilient, evaluated, tool-using LLM architectures and automated security capabilities directly into production environments within a global financial institution.
Key Responsibilities
- Build and Deploy LLM-Powered Security Systems: Architect, develop, and operationalize end-to-end AI applications, tool-augmented agents, and Retrieval-Augmented Generation (RAG) pipelines tailored to cybersecurity workflows (e.g., automated vulnerability remediation, intelligent SOC triage, SAST/DAST triage automation, and detection engineering).
- Embedded Problem Solving (Forward Deployed): Work directly with security practitioners (AppSec engineers, SOC analysts, incident responders, penetration testers) to deeply understand operational bottlenecks and translate complex security requirements into working AI software solutions.
- Agentic Workflows & Tool Integration: Design autonomous, evaluated, tool-using agent frameworks that interact securely with enterprise APIs, security scanners, SIEM/SOAR platforms, code repositories, and containerized infrastructure.
- Implement Robust AI Evaluation & Guardrails: Establish rigorous evaluation frameworks (benchmarking latency, accuracy, faithfulness, hallucination, tool-call precision) and implement input/output guardrails to ensure robust, deterministic behavior.
- Production Engineering & CI/CD: Write clean, modular, production-ready Python code. Package applications into containerized microservices and deploy via automated CI/CD pipelines following enterprise security and architecture standards.
- Secure the AI & Ensure AI Safety: Apply secure coding practices and implement defenses against AI-specific attack vectors, including prompt injection, model abuse, data leakage, and insecure tool execution. Keep safety and compliance non-negotiable from day one.
- Cross-Team Knowledge Sharing & Scaling: Standardize reusable AI components, evaluation patterns, and integration libraries across the broader CISO engineering organization to accelerate enterprise-wide adoption.
Levels We're Hiring For
This is a multi-level requisition within our Cyber AI Engineering team. Candidates will be evaluated for placement at either the Assistant Vice President (AVP / C12) or Vice President (VP / C13) level based on their technical depth, engineering leadership, and domain expertise.
Assistant Vice President (AVP - C12)
Must-Have Requirements
- AI / LLM Engineering: Hands-on experience building LLM-powered systems (prompt engineering, RAG architectures, structured outputs, and tool/function calling)—beyond simply consuming commercial chat assistants.
- Security Domain Depth: Foundational knowledge in either Application Security (OWASP Top 10, SAST/DAST, secure code review) or Security Operations (SOC alert triage, SIEM workflows, incident analysis).
Nice-to-Have Requirements
- Experience & Seniority: 4–7+ years of software engineering experience with strong proficiency in Python and a proven track record of shipping production services/pipelines (REST APIs, microservices, containerization with Docker/Kubernetes, CI/CD).
- Tooling & Platforms: Hands-on experience with AppSec tooling (e.g., Semgrep, CodeQL, Snyk, Burp Suite) or enterprise SIEM platforms (e.g., Splunk, Microsoft Sentinel, Elastic, Google Chronicle).
- Advanced AI & Security: Familiarity with detection engineering, the MITRE ATT&CK framework, and awareness of common AI attack surfaces (e.g., prompt injection, jailbreaking, OWASP Top 10 for LLMs).
Vice President (VP - C13)
Must-Have Requirements
- Advanced Agentic & LLM Engineering: Proven experience architecting, building, and evaluating production tool-using agentic systems (multi-step orchestration, RAG, robust guardrail implementations, and systematic evaluation frameworks for model accuracy, latency, and reliability).
- Comprehensive Security Depth: Strong technical depth in one domain (Offensive/AppSec or Detection/SOC) combined with working fluency and cross-functional understanding in the other.
Nice-to-Have Requirements
- Experience & Seniority: 8–10+ years of software engineering experience with deep Python expertise and a demonstrable track record of architecting, shipping, and owning production systems end-to-end.
- Certifications & Accreditations: Foundational security certifications such as OSCP, GWAPT, GPEN, or GCIH.
- Advanced AI Security & Automation: Strong awareness of AI security risks (prompt injection, model poisoning, model abuse, data leakage), hands-on fine-tuning/adaptation experience, and SOAR automation workflow development.
Why Citi, Why Now
- Real and urgent. Not an innovation lab. The threats are active, the work ships into production, and it protects one of the world's largest financial institutions.
- Technical teams. These are engineering-led functions. Small teams, high autonomy, minimal governance overhead. They build tools, ship code, and measure themselves by what they deliver.
- Strong mandate. Executive sponsorship to move fast. You'll have the backing and resources to clear the path for delivery.
- Unique scope. Very few organizations operate at this intersection at this scale. The program frameworks you build will influence how the industry responds.
What we can offer you
- Direct impact on securing critical global financial infrastructure with cutting-edge AI technologies.
- Access to high-scale enterprise computing resources, state-of-the-art foundation models, and security tool ecosystems.
- A culture that values continuous learning, technical craftsmanship, and responsible AI innovation.
By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:
- Cafeteria Program
- Home Office Allowance (for colleagues working in hybrid work models)
- Paid Parental Leave Program (maternity and paternity leave)
- Private Medical Care Program and onsite medical rooms at our offices
- Pension Plan Contribution to voluntary pension fund
- Group Life Insurance
- Employee Assistance Program
- Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
- Flexible work arrangements to support you in managing work - life balance
- Career progression opportunities across geographies and business lines
- Socially active employee communities with diverse networking opportunities
Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.
Sounds like Citi has everything you need?
Then apply to discover the true extent of your capabilities.
#LI-AE1
------------------------------------------------------
Job Family Group: Technology------------------------------------------------------
Job Family:Systems & Engineering------------------------------------------------------
Time Type:Full time------------------------------------------------------
Primary Location Full Time Salary Range:12 211 560,00 Ft - 28 767 800,00 Ft------------------------------------------------------
Most Relevant Skills Please see the requirements listed above.------------------------------------------------------
Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.
Skills Required
- Hands-on experience building LLM-powered systems, including prompt engineering, RAG architectures, structured outputs, and tool or function calling
- Foundational knowledge of Application Security or Security Operations
- Experience architecting, building, and evaluating production tool-using agentic systems for the VP level
- Strong technical depth in Offensive/AppSec or Detection/SOC, with working knowledge of the other domain for the VP level
- 4-7 or more years of software engineering experience for AVP placement
- 8-10 or more years of software engineering experience for VP placement
- Strong Python proficiency and experience shipping production services or pipelines
- Experience with REST APIs, microservices, Docker or Kubernetes, and CI/CD
- Experience with AppSec tooling or enterprise SIEM platforms
- Familiarity with detection engineering and the MITRE ATT&CK framework
- Awareness of AI attack surfaces, including prompt injection, jailbreaking, model abuse, and OWASP Top 10 for LLMs
- Foundational security certification such as OSCP, GWAPT, GPEN, or GCIH
- Hands-on fine-tuning or model adaptation experience and SOAR automation workflow development
What We Do
Citigroup is a global diversified financial services holding company serving consumers, corporations, governments and institutions. It provides consumer banking and credit, corporate and investment banking, securities brokerage, trade and securities services, and wealth management. Operating across nearly 160 countries and jurisdictions, Citi aims to be a leading partner for institutions with cross-border needs, a global wealth manager, and a valued personal bank in the United States.
.png){kind=logo}
