Cybersecurity Specialist

Vulnerability Threat Management Triage Analyst The Vulnerability Threat Management Triage Analyst is a critical cybersecurity role responsible for the rapid analysis and triage of incoming vulnerabilities. This position serves as a subject matter expert, leading efforts to assess threats for risk, potential impact, and exploit status within the Citi environment. The ideal candidate is a cybersecurity SME who can think fast, act quickly, and work proactively to prevent, monitor, and respond to potential cyber-attacks. Key Responsibilities ● Perform daily, in-depth analysis of critical vulnerabilities from various intelligence sources to determine their risk, potential impact, and relevance to Citi's technology landscape. ● Investigate the use and exposure of vulnerable technologies across the firm by self-serving technology data through database queries and by investigating individually with engineering teams and product owners. ● Assess the exploit status of vulnerabilities, leveraging threat intelligence and security research to prioritize remediation efforts effectively. ● Coordinate the analysis and delivery of actionable Information Security Vulnerability Findings to internal stakeholders, providing clear, interpretative analysis. Ideal Candidate Profile Essential Qualifications: ● Experience: 5+ years of work experience in Information Security, specifically with a strong background in vulnerability management and threat analysis. ● Education: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience. ● Vulnerability Analysis: Deep understanding of Information Security and Vulnerability Management processes, patch development, and application/system architecture. ● Data & Scripting: Strong proficiency with SQL for database querying and data analysis. ● Communication: Fluent in English with a proven ability to articulate complex technical findings and translate them for both technical and business stakeholders. ● Analytical Mindset: Proven analytical and problem-solving skills, with the ability to perform research, assessment, and analysis under pressure. Preferred Qualifications: ● Programming/Scripting: Knowledge of a programming and/or scripting language, with a strong preference for Python. ● Scanning Tools: Experience with or knowledge of industry-standard scanning tools (e.g., Qualys, Snyk). ● Statistics: Good knowledge of descriptive statistics for metrics and reporting. ● Office Suite: Proficiency with the Microsoft Office Suite.