Cybersecurity Specialist

Vulnerability Threat Management Triage Analyst

The Vulnerability Threat Management Triage Analyst is a critical cybersecurity role responsible for the rapid analysis and triage of incoming vulnerabilities. This position serves as a subject matter expert, leading efforts to assess threats for risk, potential impact, and exploit status within the Citi environment. The ideal candidate is a cybersecurity SME who can think fast, act quickly, and work proactively to prevent, monitor, and respond to potential cyber-attacks.

Key Responsibilities

• Perform daily, in-depth analysis of critical vulnerabilities from various intelligence sources to determine their risk, potential impact, and relevance to Citi's technology landscape.
• Investigate the use and exposure of vulnerable technologies across the firm by self-serving technology data through database queries and by investigating individually with engineering teams and product owners.

• Assess the exploit status of vulnerabilities, leveraging threat intelligence and security research to prioritize remediation efforts effectively.
• Coordinate the analysis and delivery of actionable Information Security Vulnerability Findings to internal stakeholders, providing clear, interpretative analysis.

Ideal Candidate Profile

Essential Qualifications:

• Experience: 5+ years of work experience in Information Security, specifically with a strong background in vulnerability management and threat analysis.
• Education: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.

• Vulnerability Analysis: Deep understanding of Information Security and Vulnerability Management processes, patch development, and application/system architecture.
• Data & Scripting: Strong proficiency with SQL for database querying and data analysis.

• Communication: Fluent in English with a proven ability to articulate complex technical findings and translate them for both technical and business stakeholders.
• Analytical Mindset: Proven analytical and problem-solving skills, with the ability to perform research, assessment, and analysis under pressure.

Preferred Qualifications:

• Programming/Scripting: Knowledge of a programming and/or scripting language, with a strong preference for Python.
• Scanning Tools: Experience with or knowledge of industry-standard scanning tools (e.g., Qualys, Snyk).

• Statistics: Good knowledge of descriptive statistics for metrics and reporting.
• Office Suite: Proficiency with the Microsoft Office Suite.