at Citi
Bulge Bracket Investment BanksPosted 6 days ago
No clicks
**Banamex - DevSecOps Engineer Sr - C12** - **Senior** DevSecOps Engineer needed. Lead secure integration in DevOps pipelines and SDLC, ensuring fast, reliable software delivery. - **Key Responsibilities:** Implement secure, scalable, automated systems; shift-left security; mentor technical teams; manage CI/CD pipelines using GitHub, SonarCloud, Snyk, JFrog. - **Required Experience:** 5-8 years, cloud, automation, security, software development. **Nice to Haves:** Microsoft Azure, AWS knowledge; Kubernetes; Policy-as-Code; Zero Trust implementation; relevant certifications. - **Education:** Bachelor's degree. **Apply Now** to join a global team at Citi.
- Compensation
- Not specified
- City
- Not specified
- Country
- Mexico
Currency: Not specified
Full Job Description
Banamex - DevSecOps Engineer Sr - C12
Job Req Id:
26974650
Location(s):
Ciudad De Mexico, Ciudad De Mexico, Mexico
Job Type:
Hybrid
Posted:
Jul. 27, 2026
Discover your future at Citi
Working at Citi is far more than just a job. A career with us means joining a team of approximately 219,000 dedicated people from around the globe. At Citi, youll have the opportunity to grow your career, give back to your community and make a real impact.
Job Overview
The Engineer Sr Analyst is an intermediate level position responsible for a variety of engineering activities including the design, acquisition and development of hardware, software and network infrastructure in coordination with the Technology team. The overall objective of this role is to ensure quality standards are being met within existing and planned frameworks.
Responsibilities:
- Contribute to the budgetary requirement definition for assigned product area, develop functional specifications, and create project plans and software release schedules
- Partner with business and development teams to identify engineering requirements and assist in defining application and system requirements and processes and maintain engineering relationships with the end user/client
- Ensure requirements/tasks from technology departments and/or end users are communicated to stakeholders
- Provide solutions and processes in accordance with audit initiatives and requirements and consult with Business Information Security officers (BISOs) and TISOs
- Exhibit in-depth understanding of engineering concepts and principles
- Assist with training activities and mentor junior team members
- Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
Recommended Qualifications: Qualifications:
- 5-8 years of relevant experience in an Engineering role
- Experience working in Financial Services or a large complex and/or global environment
- Project Management experience
- Consistently demonstrates clear and concise written and verbal communication
- Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
- Demonstrated analytic/diagnostic skills
- Ability to work in a matrix environment and partner with virtual teams
- Ability to work independently, prioritize, and take ownership of various parts of a project or initiative
- Ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements
- Proven track record of operational process change and improvement
Education:
- Bachelors degree/University degree or equivalent experience
Buscamos un ingeniero DevSecOps snior altamente cualificado para liderar la integracin de prcticas de seguridad en nuestros pipelines de DevOps y en el ciclo de vida de desarrollo de software (SDLC). Este puesto se encargar de disear, implementar y mantener sistemas seguros, escalables y automatizados que permitan una entrega de software rpida y fiable, garantizando al mismo tiempo una seguridad slida y el cumplimiento normativo.
El candidato ideal combina una profunda experiencia en la nube, automatizacin y seguridad de aplicaciones con experiencia prctica en herramientas modernas de DevSecOps y una slida base en desarrollo de software.
Estrategia y liderazgo en DevSecOps
Impulsar la adopcin de principios DevSecOps y prcticas de seguridad "shift-left" (integracin temprana de la seguridad).
Proporcionar liderazgo tcnico y mentora a los equipos de ingeniera.
Promover una cultura slida de seguridad, automatizacin y experiencia del desarrollador CI/CD y automatizacin
Disear y operar pipelines de CI/CD seguros utilizando:
GitHub y GitHub Actions
Integrar controles de seguridad automatizados en los pipelines, incluyendo:
SAST con SonarCloud
SCA con Snyk
Escaneo de artefactos y dependencias con JFrog Xray/Curation
Implementar mecanismos de control (guardrails), aplicacin de polticas y gobernanza de lanzamientos.
Gestin de artefactos y dependencias
Gestionar y asegurar artefactos utilizando JFrog Artifactory.
Aplicar polticas de integridad, procedencia y vulnerabilidad de los artefactos.
Implementar prcticas seguras en la cadena de suministro de software.
Seguridad en la nube e infraestructura
Disear soluciones seguras en la nube (Azure, AWS o GCP).
Implementar Infraestructura como Cdigo (IaC) y aplicar estndares base de seguridad.
Automatizar la gestin de configuraciones utilizando herramientas como Ansible.
Seguridad de aplicaciones y contenedores
Garantizar que el cdigo de la aplicacin cumpla con los estndares de codificacin segura.
Integrar el escaneo de vulnerabilidades en los flujos de trabajo de desarrollo.
Apoyar estrategias de seguridad de contenedores y proteccin en tiempo de ejecucin (runtime).
Gestin de vulnerabilidades y respuesta a incidentes
Gestionar y realizar el seguimiento de vulnerabilidades utilizando ServiceNow Vulnerability Response.
Colaborar con los equipos de seguridad e ingeniera para priorizar y mitigar riesgos.
Automatizar los flujos de trabajo de triaje, generacin de informes y remediacin de vulnerabilidades.
Monitorizacin y observabilidad
Implementar registro de eventos (logging), monitorizacin y alertas de seguridad.
Apoyar las iniciativas de deteccin de amenazas y respuesta a incidentes.
Cualificaciones deseables
Experiencia con Kubernetes y ecosistemas de contenedores.
Familiaridad con polticas como cdigo (policy-as-code) y marcos de gobernanza.
Experiencia en la implementacin de arquitecturas Zero Trust.
Certificaciones relevantes:
Microsoft Azure Security Engineer
AWS Security Specialty
CISSP, CISM o equivalente
------------------------------------------------------
Job Family Group:
Technology------------------------------------------------------
Job Family:
Systems & Engineering------------------------------------------------------
Time Type:
Full time------------------------------------------------------
Most Relevant Skills
Please see the requirements listed above.------------------------------------------------------
Other Relevant Skills
For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi( opens in new window).
View Citis EEO Policy Statement( opens in new window) and the Know Your Rights( opens in new window) poster.
