below marketmost similar roles pay hereabove market
This role pays less than
67%
of similar roles. Most pay
$151,493–$216,000
— the blue band above.
At the midpoint, this role pays about
$157k
versus about
$184k
for comparable roles.
Based on 240 similar postings.
Employer
About Citi
Citi is one of the world’s most trusted financial institutions, proudly serving millions of customers across the United States.
Citi currently has
268 open roles
on FindRole.
Listed pay typically runs
$125,760–$188,640
across 251 roles with salary data.
The Senior Application Security Engineer (Java), VP joins the Technology Infrastructure team to own the engineering lifecycle for critical authentication and information security platforms. This role involves maintaining, enhancing, and debugging Java-based microservices while managing the rollout of security patches and certifying new SafeWord product releases. The engineer will implement authentication frameworks including MFA, 2FA, OTP, Challenge/Response, and RADIUS. Key responsibilities include building automation scripts in Shell and SQL, optimizing PL-SQL procedures, and migrating services from virtual machines to containerized OpenShift platforms. Required technical skills include Java, Linux/Unix, LDAP, Kerberos, SAML, and PAM, alongside experience with Splunk and AppDynamics. The position addresses the technical challenge of upgrading legacy authentication components and ensuring high availability across enterprise security services.
Maintain, enhance, and debug Java-based applications and microservices supporting authentication flows and security controls.
Evaluate third-party libraries and security updates for compatibility, performance, and risk impact.
Implement and configure authentication protocols including 2FA/MFA, OTP, Challenge/Response, and RADIUS.
Certify new versions of the SafeWord authentication product and stage security patches across infrastructure.
Build and maintain Shell scripts to automate operational tasks and deployments.
Write and optimize database scripts and procedures using SQL and PL-SQL.
Support the migration of authentication services from virtual machines to containerized OpenShift platforms.
Develop and maintain Standard Operating Procedures (SOPs) for authentication platform operations.
What we're looking for
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related technical field.
4+ years' progressive experience in software engineering, application security, and/or infrastructure engineering with a focus on authentication systems.
Strong hands-on experience in Java programming, debugging, and maintaining enterprise Java applications.
Solid understanding of authentication mechanisms including 2FA/MFA, OTP, and Challenge/Response architectures.
Practical knowledge of network authentication protocols including RADIUS, LDAP/Active Directory, Kerberos, SAML, and PAM.
Advanced proficiency in Linux/Unix operating systems and strong Shell scripting skills in Bash and KornShell.
Proficiency in writing SQL and PL-SQL queries and scripts.
Familiarity with containerization and orchestration technologies such as Docker, OpenShift, or Kubernetes (preferred).
Industry certifications in Information Security or Networking such as CompTIA Security+, Network+, CEH, or CCNA (preferred).
Experience within Financial Services, Banking, or other highly regulated enterprise environments (preferred).
Mobile Application Security
iOS
Android
Ruby
Go
Python
CI/CD
Penetration Testing
Dynamic Analysis
Threat Modeling
Identity and Authentication
Secure Data Storage
AI Security
Code Review