The Security Operations Center (SOC) Cyber Threat Analyst will be part of the Global SOC Team. This center operates 24x7, follow-the-sun model to monitor, analyze and respond to cyber-attacks and information/data breaches. SOC Analysts are the critical first line of defense, in charge of monitoring Citi’s environment globally through state-of-the‑art security detections tools, responding to security events and escalating security incidents that have potential impact to Citi. Responsibilities
Analyze security events to identify potential threats and intrusions. Events include but not limited to Intrusion Detection/Prevention tools, anomaly detection systems, Firewalls, Antivirus and EDR systems, proxy devices, cloud security solution and data leakage prevention system. Assess and investigate potential security threats sourced from other channels leveraging variety of data and tools. Drive a continuous effort to improve SOC process. Execute adhoc tasks or small projects as needed. Und...