2 days ago
Mississauga, CanadaMid Level / Senior
Base Salary
$112k - $162k/yr
Responsibilities
- Write, refactor, and review application code to remediate SAST vulnerabilities and validate that fixes address root causes.
- Resolve third-party dependency and framework upgrades, including transitive conflicts, breaking API changes, and version incompatibilities.
- Create and optimize Dockerfiles, container manifests, base images, and container rebuild processes for Kubernetes/OpenShift deployments.
- Configure and tune CI/CD build and release pipelines to reduce manual steps and enable same-day emergency hotfixes.
- Review remediation plans and contractor pull requests for security correctness, test coverage, code quality, and architectural standards.
- Guide application squads in using security tools, IDE plugins, automated PR bots, scanning utilities, and internal developer platforms.
- Troubleshoot scanner false positives, configuration errors, dependency conflicts, and build pipeline failures while providing feedback to tooling teams.
Requirements
- Bachelor’s degree in Computer Science, Software Engineering, Information Systems, or a related technical field.
- 4–7 years of hands-on software development and engineering experience delivering enterprise web applications, microservices, or distributed backend systems.
- Proven experience directly fixing SAST vulnerabilities and managing production third-party dependency and package upgrades.
- Hands-on experience containerizing applications and deploying them with Docker, Kubernetes, or OpenShift.
- Strong development proficiency in one or two enterprise language stacks, including Java/Spring Boot, Python, Go, C#/.NET, or TypeScript/Node.js.
- Experience with SAST tools such as SonarQube, Checkmarx, Veracode, or Fortify.
- Experience with Maven, Gradle, npm/yarn, NuGet, pip/Poetry, or Go modules and SCA tools such as Snyk, Black Duck, or JFrog Xray.
- Proficiency with Git and CI/CD pipeline technologies such as Jenkins, GitHub Actions, Tekton, GitLab CI, or Harness.
- Ability to write automated unit, integration, and regression tests and to troubleshoot dependency, build, and release issues.
Benefits
- Full-time position.
Tech Stack
C#DockerGitGitHub ActionsGitLab CI/CDGoGradleHarnessJavaJavaScriptJenkinsKubernetesMaven.NETNode.jsnpmOpenShiftPythonSonarQubeSpring BootTektonTypeScriptYarn
Categories
About Citi
Citi is a public financial-services company offering consumer and institutional banking, credit cards, wealth management, treasury and trade solutions, and capital-markets services. It serves individuals, corporations, financial institutions, and governments in more than 160 countries and jurisdictions, earning interest and fee income from lending, payments, trading, and advisory. Founded in 1812 and headquartered in New York, it trades on the NYSE under the ticker C.