Job Description

Vulnerability Threat Management Triage Analyst

The Vulnerability Threat Management Triage Analyst is a critical cybersecurity role responsible for the rapid analysis and triage of incoming vulnerabilities. This position serves as a subject matter expert, leading efforts to assess threats for risk, potential impact, and exploit status within the Citi environment. The ideal candidate is a cybersecurity SME who can think fast, act quickly, and work proactively to prevent, monitor, and respond to potential cyber-attacks.

Key Responsibilities

. Perform daily, in-depth analysis of critical vulnerabilities from various intelligence sources to determine their risk, potential impact, and relevance to Citi's technology landscape.

. Investigate the use and exposure of vulnerable technologies across the firm by self-serving technology data through database queries and by investigating individually with engineering teams and product owners.

. Assess the exploit status of vulnerabilities, leveraging threat intelligence and security research to prioritize remediation efforts effectively.

. Coordinate the analysis and delivery of actionable Information Security Vulnerability Findings to internal stakeholders, providing clear, interpretative analysis.

Ideal Candidate Profile

Essential Qualifications:

. Experience: 5+ years of work experience in Information Security, specifically with a strong background in vulnerability management and threat analysis.

. Education: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.

. Vulnerability Analysis: Deep understanding of Information Security and Vulnerability Management processes, patch development, and application/system architecture.

. Data & Scripting: Strong proficiency with SQL for database querying and data analysis.

. Communication: Fluent in English with a proven ability to articulate complex technical findings and translate them for both technical and business stakeholders.

. Analytical Mindset: Proven analytical and problem-solving skills, with the ability to perform research, assessment, and analysis under pressure.

Preferred Qualifications:

. Programming/Scripting: Knowledge of a programming and/or scripting language, with a strong preference for Python.

. Scanning Tools: Experience with or knowledge of industry-standard scanning tools (e.g., Qualys, Snyk).

. Statistics: Good knowledge of descriptive statistics for metrics and reporting.

. Office Suite: Proficiency with the Microsoft Office Suite.