The Security Operations Center (SOC) Cyber Threat Analyst will be part of the Global SOC Team. This center operates 24x7, follow‑the‑sun model to monitor, analyze and respond to cyber‑attacks and information/data breaches. SOC Analysts are the critical first line of defense, in charge of monitoring Citi’s environment globally through state‑of‑the‑art security detection tools, responding to security events and escalating security incidents that have potential impact to Citi.

Responsibilities

• Analyze security events to identify potential threats and intrusions. Events include but are not limited to Intrusion Detection/Prevention tools, anomaly detection systems, Firewalls, Antivirus and EDR systems, proxy devices, cloud security solution and data leakage prevention system.
• Assess and investigate potential security threats sourced from other channels leveraging a variety of data and tools.
• Drive a continuous effort to improve SOC process. ...