Eirene Enterprise Technical Change Lead (Enterprise Software Vulnerability Remediation & Rapid Patching)

Overview

Senior Lead Analyst role leading applications development and a hands-on Technical Change Lead role driving software vulnerability remediation (SAST and SCA) and rapid patching across designated application portfolios.

What you'll do

• Lead integration of functions to meet goals, deploy new products, and enhance processes.
• Analyze complex business processes, system processes, and industry standards to define and develop solutions to high-level problems.
• Provide advanced applications programming expertise and plan assignments involving large budgets, cross-functional projects, or multiple projects.
• Develop application methodologies and standards for program analysis, design, coding, testing, debugging, and implementation.
• Consult with end users to identify system function specifications and incorporate them into overall system design.
• Allocate work and act as advisor/coach to developers, analysts, and new team members.
• Influence and negotiate with senior leaders and communicate with external parties.
• Assess risk in business decisions, safeguarding Citigroup, its clients and assets, and drive compliance with applicable laws, rules, regulations and Policy.
• Work directly with application teams to assess release pipelines, identify deployment bottlenecks, and implement lightweight release patterns enabling same-day patching of critical security defects.
• Guide development squads in modernizing legacy packaging and transitioning workloads into containerized runtimes (e.g., Docker, Kubernetes, OpenShift).
• Lead practical technical workshops and hands-on coding/pairing sessions on refactoring insecure code patterns and safely upgrading dependencies with zero downtime.
• Review, critique, and validate vulnerability remediation plans submitted by application teams.
• Evaluate technical trade-offs involving breaking API changes, major framework upgrades, and compiler/runtime compatibility.
• Assist application architects in breaking large remediation initiatives into sprint-sized, testable increments with automated regression validation.
• Coordinate day-to-day technical workflows for external contractor squads and staff augmentation engineers.
• Review contractor code submissions and pull requests for adherence to enterprise code quality, testing, and security standards.
• Track contractor burn-down rates and triage throughput, and verify knowledge transfer to permanent application owners.
• Champion adoption of developer-centric scanning and remediation tools within engineering workflows.
• Gather developer feedback on scanning false positives, build breaks, or pipeline delays and partner with tooling teams to refine configurations.
• Assist in rolling out centralized vulnerability tracking portals, SBOM management tools, and fast-track change approval pathways.
• Monitor and report on remediation health, tracking MTTR, Static Code Defect Resolution Velocity, Dependency Patch Aging, and Same-Day Fix Readiness.
• Escalate systemic technical roadblocks and infrastructure gaps to the Program Director and platform owners.
• Ensure completed remediations have sufficient automated testing and deployment evidence to satisfy internal audit and risk compliance.

What you'll need

• 10+ years of relevant experience.
• Bachelor's degree/University degree or equivalent experience in Computer Science, Software Engineering, Information Technology, or related technical field.
• 7–15 years of progressive experience in software engineering, application architecture, or technical delivery leadership.
• 3–5+ years in a lead engineer, technical architect, or technical lead role guiding engineering squads, driving code quality improvements, or managing technical debt / software remediation initiatives.
• Experience in implementing projects.
• Experience in systems analysis and programming of software applications.
• Demonstrated Subject Matter Expert (SME) in area(s) of Applications Development.
• Demonstrated knowledge of client core business functions.
• Demonstrated leadership, project management, and development skills.
• Relationship and consensus building skills.
• Demonstrated hands-on experience refactoring software to resolve static code defects (SAST) and managing complex third-party library/framework upgrades across multi-tier applications.
• Experience collaborating with and directing external contractors, vendor delivery teams, or distributed engineering resources.
• Practical experience interpreting SAST findings (e.g., SonarQube, Checkmarx, Veracode, Fortify) and implementing secure coding patterns in Java, Python, Go, C#/.NET, or JavaScript/TypeScript.
• Deep familiarity with SCA tools (e.g., Snyk, Black Duck, JFrog Xray, Dependabot) and dependency ecosystems (Maven, Gradle, npm, NuGet, pip).
• Hands-on proficiency with container technologies (Docker, OCI), container management platforms (Kubernetes, OpenShift), and container base-image patching strategies.
• Experience optimizing CI/CD pipelines (e.g., Jenkins, Tekton, Harness, GitHub Actions), automated test execution, and deployment strategies (canary, blue-green) for hotfixes and same-day releases.

Nice to have

• Master's degree.

Details

• Location: Pune, Maharashtra, India.
• Time type: Part time.
• Job family: Applications Development (Technology group).