Job Description

This is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks on a 24x7 basis. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

Responsibilities:

• As a key member of the Security Operations Center team, the analyst's primary responsibilities will include:

  • Actively monitoring, researching, and assessing security events to identify and analyze web application attacks and digital fraud.

  • Specialized in detecting and responding to threats such as Account Takeovers (ATO), Distributed Denial of Service (DDoS) attacks, common web application vulnerabilities (e.g., Cross-Site Scripting, SQL injection, command injection), and anomalies in financial transactions.

• Follow pre-defined actions to handle BAU and high severity issues including escalating to other support groups.

• Execute daily ad hoc tasks or lead small projects as needed.

• Perform assessment as well as troubleshooting to help isolate technical issues with the integration of fraud monitoring technologies

• Identify areas for tuning use cases to enhance monitoring value.

• Engage with Fraud Policy, Operations, Strategy and other teams for early detection, prevention, and mitigation of detected fraudulent activities.

Job Skills:

• Strong knowledge of current Digital Fraud trends including common Account Takeover techniques.

• Deep understanding of Application Layer Protocols (HTTP) and OWASP Top 10, including detection of common web application vulnerabilities.

• Knowledge of cutting-edge threats and technologies affecting Web Applications.

• The following experiences will be considered a plus:

  • Experience with vulnerability assessment as well as penetration testing.

  • Experience w­ith any scripting language and Splunk.

  • Understanding of various operating systems (Windows/UNIX), and web technologies (focusing on Internet security).

  • Experience with Big Data Technologies, ETL Tools, Data Warehouse and Business Intelligence technologies.

• Consistently demonstrates clear and concise written and verbal communication

• Proven influencing and relationship management skills

• Proven strong analytical skills

• Attentive to detail and possess a strong investigative mindset

• A good team player, self-driven and able to act as individual contributor

Qualifications:

• 5-8 years of relevant experience in SOC.

• Relevant experience in cyber fraud is a plus.

• Following Certifications will be considered a plus: [CISSP, GWAPT and CFE].

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Regular weekly work shift will include one of the weekends (e,g, Saturday Or Sunday).

#LI-Hybrid

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Information Security

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi

View Citi’s EEO Policy Statement and the Know Your Rights poster.