Citibank, N.A. seeks an Info Sec Tech Lead Analyst for its Irving, TX location.

Duties: Monitor security events utilizing SIEM tools, including events from Intrusion Detection Systems, Web Threat Detection, and Fraud Monitoring tools also determining the possible cause of event. Perform deep packet analysis using IDS/IPS to identify different attack vectors and prevent a security breach or compromise. Correlate incident data to identify areas of potential security threats and fraud using SIEM tools and enable remediation. Conduct statistical analysis, using Big Data Analytics and Machine Learning techniques, to develop fraud prevention/detection strategies. Identify areas for tuning use cases or signatures to enhance monitoring value. Liaise with Fraud Policy, Fraud Operations, Fraud Strategy to develop detection, prevention, and mitigation plans for emerging fraud trends. Create and maintain operational reports that outline key performance indicators and weekly and monthly metrics. Implement the initial risk assessment on new threats and vulnerabilities and make recommendations that enable immediate mitigation. Participate in daily ad-hoc conference calls and document root cause and investigation steps of new cyber fraud use cases. Identify manual credential validation attacks using post login behavior of compromised accounts and mitigate them. Detect electronic fraud by utilizing merchant registration at the point-of-sale machines to validate credit cards. Perform monitoring, research, assessment, and analysis of Digital Fraud Attacks leveraging various Security Event Monitoring platforms including Web Threat Detection, Real Time Fraud Risk Assessment, Big Data and Digital Application Monitoring tools. Collaborate with content management teams to monitor security logs feeding into monitoring channels and set escalation paths using Splunk SIEM, Archer, Akamai WAF. Achieve reduction in cycle time by adopting new tools & updated queries for efficient analysis processes using VBScript, SQL, and SAS queries. Perform assessment as well as troubleshooting to help isolate technical issues with the integration of fraud monitoring technologies. A telecommuting/hybrid work schedule may be permitted within a commutable distance from the worksite, in accordance with Citi policies and protocols.

Requirements: Bachelor’s degree, or foreign equivalent, in Computer Science, Information Technology, Information System Security, or a related field, and four (4) years of experience in the job offered, or in a related occupation in the securities industry. Four (4) years of experience, or two (2) years in the alternative with a Master’s degree, must include: Conducting in-depth root cause analysis focusing on various cyber-attack methodologies, including phishing, social engineering, man-in-the-middle attacks, and identification of banking malwares utilizing Glassbox and Open Source Intelligence tools; Performing precise Intrusion Detection analysis by scrutinizing TCP/IP logs, PCAP logs, proxy logs, network flow logs, and real-time customer activity logs using Splunk, Silvertail, and Threatmetrix tools for analysis; Leveraging Machine Learning, Business Intelligence technologies and established tools including SAS, Teradata, Hadoop, and Microsoft SQL to create robust Big Data alerting strategies; Deploying application security measures through tools including Akamai and Shape to safeguard against DDoS attacks, brute force attempts, and Web application threats; Using scripting languages including Python, Perl, VBScript, and SQL for automating tasks, manipulating Big Data, visualizing metrics, and generating comprehensive incident reports; and Managing vulnerability assessments, penetration testing, and forensic analysis, employing a methodical approach to investigating alerts and documenting findings. In the alternative, employer will accept Master’s degree, or foreign equivalent, in an above stated field of study, and two (2) years of experience in the job offered or in a related occupation. 40 hrs./wk. Applicants submit resumes at https://jobs.citi.com/.  Please reference Job ID #24758154. EO Employer.

Wage Range:                $135,000.00 to $181,337.27

Job Family Group:        Technology

Job Family:                  Information Security

------------------------------------------------------

Job Family Group:

------------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Primary Location:

Irving Texas United States

------------------------------------------------------

Primary Location Full Time Salary Range:

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

------------------------------------------------------

Anticipated Posting Close Date:

Oct 11, 2024

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting