Cybersecurity Specialist

Vulnerability Threat Management Triage Analyst

The Vulnerability Threat Management Triage Analyst is a critical cybersecurity role responsible for the rapid analysis and triage of incoming vulnerabilities. This position serves as a subject matter expert, leading efforts to assess threats for risk, potential impact, and exploit status within the Citi environment. The ideal candidate is a cybersecurity SME who can think fast, act quickly, and work proactively to prevent, monitor, and respond to potential cyber-attacks.

Key Responsibilities

● Perform daily, in-depth analysis of critical vulnerabilities from various intelligence sources to determine their risk, potential impact, and relevance to Citi's technology landscape.

● Investigate the use and exposure of vulnerable technologies across the firm by self-serving technology data through database queries and by investigating individually with engineering teams and product owners.

● Assess the exploit status of vulnerabilities, leveraging threat intelligence and security research to prioritize remediation efforts effectively.

● Coordinate the analysis and delivery of actionable Information Security Vulnerability Findings to internal stakeholders, providing clear, interpretative analysis.

Ideal Candidate Profile

Essential Qualifications:

● Experience: 5+ years of work experience in Information Security, specifically with a strong background in vulnerability management and threat analysis.

● Education: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.

● Vulnerability Analysis: Deep understanding of Information Security and Vulnerability Management processes, patch development, and application/system architecture.

● Data & Scripting: Strong proficiency with SQL for database querying and data analysis.

● Communication: Fluent in English with a proven ability to articulate complex technical findings and translate them for both technical and business stakeholders.

● Analytical Mindset: Proven analytical and problem-solving skills, with the ability to perform research, assessment, and analysis under pressure.

Preferred Qualifications:

● Programming/Scripting: Knowledge of a programming and/or scripting language, with a strong preference for Python.

● Scanning Tools: Experience with or knowledge of industry-standard scanning tools (e.g., Qualys, Snyk).

● Statistics: Good knowledge of descriptive statistics for metrics and reporting.

● Office Suite: Proficiency with the Microsoft Office Suite.