Forward Deployed AI Engineer for Cyber Security

Job Overview

As a Forward Deployed AI Engineer for Cyber Security, you will sit at the intersection of applied AI/LLM engineering and enterprise cybersecurity. You will be embedded directly with cybersecurity operational and engineering teams (Application Security, SecOps/SOC, Threat Intelligence, and Vulnerability Management) to build, deploy, and scale production-grade AI systems, LLM-powered pipelines, and autonomous agentic workflows that solve high-impact security challenges.

You are not just integrating APIs or using chat assistants—you are designing and shipping resilient, evaluated, tool-using LLM architectures and automated security capabilities directly into production environments within a global financial institution.

Key Responsibilities

• Build and Deploy LLM-Powered Security Systems: Architect, develop, and operationalize end-to-end AI applications, tool-augmented agents, and Retrieval-Augmented Generation (RAG) pipelines tailored to cybersecurity workflows (e.g., automated vulnerability remediation, intelligent SOC triage, SAST/DAST triage automation, and detection engineering).
• Embedded Problem Solving (Forward Deployed): Work directly with security practitioners (AppSec engineers, SOC analysts, incident responders, penetration testers) to deeply understand operational bottlenecks and translate complex security requirements into working AI software solutions.
• Agentic Workflows & Tool Integration: Design autonomous, evaluated, tool-using agent frameworks that interact securely with enterprise APIs, security scanners, SIEM/SOAR platforms, code repositories, and containerized infrastructure.
• Implement Robust AI Evaluation & Guardrails: Establish rigorous evaluation frameworks (benchmarking latency, accuracy, faithfulness, hallucination, tool-call precision) and implement input/output guardrails to ensure robust, deterministic behavior.
• Production Engineering & CI/CD: Write clean, modular, production-ready Python code. Package applications into containerized microservices and deploy via automated CI/CD pipelines following enterprise security and architecture standards.
• Secure the AI & Ensure AI Safety: Apply secure coding practices and implement defenses against AI-specific attack vectors, including prompt injection, model abuse, data leakage, and insecure tool execution. Keep safety and compliance non-negotiable from day one.
• Cross-Team Knowledge Sharing & Scaling: Standardize reusable AI components, evaluation patterns, and integration libraries across the broader CISO engineering organization to accelerate enterprise-wide adoption.

Levels We're Hiring For

This is a multi-level requisition within our Cyber AI Engineering team. Candidates will be evaluated for placement at either the Assistant Vice President (AVP / C12) or Vice President (VP / C13) level based on their technical depth, engineering leadership, and domain expertise.

Must-Have Requirements

• AI / LLM Engineering: Hands-on experience building LLM-powered systems (prompt engineering, RAG architectures, structured outputs, and tool/function calling)—beyond simply consuming commercial chat assistants.
• Security Domain Depth: Foundational knowledge in either Application Security (OWASP Top 10, SAST/DAST, secure code review) or Security Operations (SOC alert triage, SIEM workflows, incident analysis).

Must-Have Requirements

• Advanced Agentic & LLM Engineering: Proven experience architecting, building, and evaluating production tool-using agentic systems (multi-step orchestration, RAG, robust guardrail implementations, and systematic evaluation frameworks for model accuracy, latency, and reliability).
• Comprehensive Security Depth: Strong technical depth in one domain (Offensive/AppSec or Detection/SOC) combined with working fluency and cross-functional understanding in the other.

Nice-to-Have Requirements

• Experience & Seniority: 4–7+ years of software engineering experience with strong proficiency in Python and a proven track record of shipping production services/pipelines (REST APIs, microservices, containerization with Docker/Kubernetes, CI/CD).
• Tooling & Platforms: Hands-on experience with AppSec tooling (e.g., Semgrep, CodeQL, Snyk, Burp Suite) or enterprise SIEM platforms (e.g., Splunk, Microsoft Sentinel, Elastic, Google Chronicle).
• Advanced AI & Security: Familiarity with detection engineering, the MITRE ATT&CK framework, and awareness of common AI attack surfaces (e.g., prompt injection, jailbreaking, OWASP Top 10 for LLMs).

Nice-to-Have Requirements

• Experience & Seniority: 8–10+ years of software engineering experience with deep Python expertise and a demonstrable track record of architecting, shipping, and owning production systems end-to-end.
• Certifications & Accreditations: Foundational security certifications such as OSCP, GWAPT, GPEN, or GCIH.
• Advanced AI Security & Automation: Strong awareness of AI security risks (prompt injection, model poisoning, model abuse, data leakage), hands-on fine-tuning/adaptation experience, and SOAR automation workflow development.

Why Citi, Why Now

• Real and urgent. Not an innovation lab. The threats are active, the work ships into production, and it protects one of the world's largest financial institutions.
• Technical teams. These are engineering-led functions. Small teams, high autonomy, minimal governance overhead. They build tools, ship code, and measure themselves by what they deliver.
• Strong mandate. Executive sponsorship to move fast. You'll have the backing and resources to clear the path for delivery.
• Unique scope. Very few organizations operate at this intersection at this scale. The program frameworks you build will influence how the industry responds.

What we can offer you

• Direct impact on securing critical global financial infrastructure with cutting-edge AI technologies.
• Access to high-scale enterprise computing resources, state-of-the-art foundation models, and security tool ecosystems.
• A culture that values continuous learning, technical craftsmanship, and responsible AI innovation.

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program
• Home Office Allowance (for colleagues working in hybrid work models)
• Paid Parental Leave Program (maternity and paternity leave)
• Private Medical Care Program and onsite medical rooms at our offices
• Pension Plan Contribution to voluntary pension fund
• Group Life Insurance
• Employee Assistance Program
• Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
• Flexible work arrangements to support you in managing work - life balance
• Career progression opportunities across geographies and business lines
• Socially active employee communities with diverse networking opportunities

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.

Discover your future at Citi

Working at Citi is far more than just a job. A career with us means joining a team of approximately 219,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.