Job Description

The Intelligence Lead Analyst is a senior level professional responsible for driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of th The Intelligence Lead Analyst is a senior level professional responsible for driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy. Responsibilities: Triage tactical, technical reporting in real time to determine its accuracy and identify threats of potential interest and impact to Citi and its clients. Deliver concise, actionable intelligence assessments on those threats. Develop threat actor profiles, to include MITRE ATT&CK matrices, on threat adversaries of concern to Citi. Provide real-time and local intelligence support to other operational teams from inside a Fusion Center environment. Maintain good general situational awareness of the cyber threat environment. Regularly support, involve, and liaise with other CIC Threat Intelligence Teams. Analyze cyber threat data and correlate with existing understanding of cyber threats impacting the Citi franchise. Actively monitor and research cyber threats with a direct or indirect impact to the Citi brand, business operations, infrastructure and client trust. Regularly provide intelligence briefs to technical, non-technical, and senior-level audiences. Requirements: 6+ years of relevant experience Understanding of one or more of following concepts: MITRE ATT&CK, Advanced Persistent Threats, Third Party Risks, Cybercrime, Hacktivism, Various Cyber Attack Types, Fraud, Malware and Ransomware, Mobile Threats, Social Engineering, Insider Threats, SOC function, Incident Management, Networks and Encryption. Consistently demonstrates clear and concise written and verbal communication Proven influencing and relationship management skills Proven analytical skills Preferred Qualifications: 2+ years in an intelligence (defense/law enforcement/private sector) and/or information security role Knowledge of software and hardware vulnerabilities Experience with analyzing malware samples to determine adversary attribution and/or functionality Graduate degree in one of the following areas: cybersecurity / information security / information technology / computer science Additional technical certifications This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.