The Security Operations Center (SOC) Cyber Threat Analyst will be part of the Global SOC Team. This center operates 24x7, follow-the-sun model to monitor, analyze and respond to cyber-attacks and information/data breaches. SOC Analysts are the critical first line of defense, in charge of monitoring Citi’s environment globally through state-of-the‑art security detections tools, responding to security events and escalating security incidents that have potential impact to Citi.

Responsibilities

• Analyze security events to identify potential threats and intrusions. Events include but not limited to Intrusion Detection/Prevention tools, anomaly detection systems, Firewalls, Antivirus and EDR systems, proxy devices, cloud security solution and data leakage prevention system.
• Assess and investigate potential security threats sourced from other channels leveraging variety of data and tools.
• Drive a continuous effort to improve SOC process. Execu...