City

The Email Security Senior Analyst is responsible for providing expert support and leadership to email security and brand protection functions, projects, and programs. They will be responsible for interactions with vendors, employees, and stakeholders of the team’s services. The Sr. Analyst will provide operational support, intelligence gathering, project and program management, analysis and report development, publishing, and briefing. Besides managing aspects of the day-to-day function of these programs, he or she will partner with various cyber and information security teams to enhance current solutions and find new solutions to stay ahead of the ever-changing cyber threat. The position will require substantial collaboration with other members of the team and across other Cyber Security Operations teams ensuring appropriate email security support and solutions are triaged appropriatelyResponsibilities:<ul><li>Provide expertise and experience to existing and future functions and projects focused on email threats and controls.</li><li>Actively monitor and research cyber threats with a direct or indirect impact to the Citi brand</li><li>Analyze and provide oversight of analysis of email threats and controls</li><li>Provide leadership, solution design, and hands-on development support for email security controls</li><li>Develop and manage processes to track identified incidents to resolution</li><li>Develop weekly, monthly, quarterly, and annual metrics and reports as needed</li><li>Develop written analytical reports and give presentations on findings</li><li>Triage information received from vendors and process that information through previously defined internal workflows</li><li>Manage third party vendors to ensure proper delivery of services</li><li>Manage meetings with internal stakeholders to address open issues and identify process improvements</li><li>Actively engage in liaison activities with intelligence communities, industry associations, peer institutions, and information sharing communities</li><li>Apply developed communication and diplomacy skills to guide and influence decision makers</li><li>Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients, and assets, by driving compliance with applicable laws, rules, and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing, and reporting control issues with transparency</li><li>Keep up to date with the ever-changing cyber security landscape to remain relevant and knowledgeable through internal and external certifications</li><li>Other responsibilities as needed</li></ul>Qualifications:<ul><li>Bachelor’s degree or equivalent work experience; IS Certifications are desired (CISSP, GSEC, GCFA,GREM, Security+, CISA, CISM).  Email vendor certifications a plus.</li><li>Strong experience with configuration, administering, troubleshooting email routing and filtering in Exchange, Exchange Online, Proofpoint and other enterprise level email security gateways (such as inbound routes, whitelists, email firewall rules, spam/AV, logging/reporting, TAP, TRAP, domain rewrites, secure messaging and recipient verification).</li><li>Experience in analyzing domain email activity and deploying SPF, DKIM and DMARC authentication</li><li>Experience with enterprise phishing defense concepts and technologies</li><li>Minimum 3+ years working in security engineering or security operations role, with a focus on email security</li></ul>Critical Competencies:<ul><li>Cross-functional understanding of email operations, security practices and the user experience</li><li>Highly technical and analytical expertise, with a proven deep background (preferred 5+ years’ IT experience in addition to cybersecurity) in technology design, implementation, and delivery.</li><li>Strong understanding of and demonstrated experience with the tools and sources available to conduct email and threat analysis</li><li>Ability to identify and develop new processes to address cross-functional and cross-business requirements and implement</li><li>Ability to manage projects and ensure tasks are being met timely. Work with leaders of Cyber Security Operations teams to track, drive and report on strategic initiatives.</li><li>Ability to organize and appropriately prioritize multiple, ongoing tasks via efficient time management and forecasting. Project management skills a plus</li><li>Ability to work independently, as well as in team situations, to help internal and external customers achieve desired results</li></ul>#LI-HybridWeekends and holiday work may be required------------------------------------------------------<h3>Job Family Group: </h3>Technology------------------------------------------------------<h3>Job Family:</h3>Information Security------------------------------------------------------<h3>Time Type:</h3>Full time------------------------------------------------------<h3>Most Relevant Skills </h3>Please see the requirements listed above.------------------------------------------------------<h3>Other Relevant Skills </h3>For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View Citi’s <a href="https://www.citigroup.com/global/eeo-aa-policy" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a> and the <a href="https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Know Your Rights</a> poster.

Email Security Senior Analyst (Vice President)

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations &amp; Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.About Our Team:The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.Position Overview:The Cloud and Application Security Architect is a senior individual contributor position responsible for defining the strategy and secure architectures in support of Citi’s Cloud program, spanning AWS, GCP, Azure and hybrid implementations (On-Premise). This role involves developing security policies, guiding secure architecture across the various cloud platforms, and ensuring compliance with regulatory standards. This role will also span influence on secure application development strategy for both cloud native and on-premise applications. The architect will collaborate with cross-functional teams, mentor security professionals, and drive automation in security testing. Strong leadership, strategic planning, and a deep understanding of emerging threats and risk management are essential.Responsibilities:<ul><li>Leadership<ul><li>Partner, coach and functionally lead IT, engineering, development and business teams through collaborative design discussions.</li><li>Educate internal and external clients on security risk and best practices.</li></ul></li><li>Vision and Strategy<ul><li>Define and lead the security strategy across public cloud (GCP/AWS), private cloud, and on-prem environments with a focus on Zero Trust architecture and regulatory alignment.</li></ul></li><li>Architecture and Innovation<ul><li>Develop and maintain cloud security reference architectures, playbooks, and control frameworks, tailored to the bank’s technology stack and third-party oversight obligations.</li><li>Architect secure, scalable platforms for containerized banking workloads (e.g., GKE, EKS), VPC and network segmentation, secrets management, and secure compute/storage services.</li><li>Partner with cloud engineering, platform ops, application delivery organization, and enterprise architecture to embed infrastructure security throughout service lifecycles — from ideation through production.</li></ul></li><li>Engineering and Integration<ul><li>Integrate security controls into CI/CD pipelines and infrastructure-as-code deployments (Terraform, Helm, CloudFormation), driving secure-by-design principles.</li></ul></li><li>Governance and Compliance<ul><li>Ensure compliance with banking regulations including GLBA, SOX, FFIEC, PCI-DSS, NYDFS, and OCC cybersecurity guidelines, integrating security architecture into audit and regulatory programs.</li></ul></li></ul>Qualifications:<ul><li>15+ years of experience in cybersecurity, with 5+ years in cloud and enterprise security architecture.</li><li>Demonstrated success leading security architecture for financial services, banks, or regulated industries.</li><li>Technical expertise in securing GCP, AWS, Kubernetes (GKE/EKS), Azure, cloud networking, and Application Security.</li><li>Strong command of cloud-native technologies and DevSecOps practices.</li><li>Experience with regulatory audits and control frameworks (e.g., NIST 800-53, ISO 27001, PCI DSS, FFIEC CAT).</li><li>Proven leadership in cross-functional teams, architecture review boards, and strategic planning sessions.</li><li>Excellent communication and presentation skills, with the ability to engage both technical and executive audiences.</li><li>Preferred certifications: Google Cloud Security Engineer, AWS Security Specialty, CISSP, CCSP, CKA/CKS, GCSA.</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Management and prioritization skills</li><li>Ability to develop working relationships</li><li>Ability to manage multiple activities and changing priorities, work under pressure to meet tight deadlines</li><li>Self-starter with ability to take the initiative and master new tasks quickly</li><li>Methodical, attention to detail</li></ul>Education:<ul><li>Bachelor’s/University degree or equivalent experience, potentially Masters degree</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.------------------------------------------------------<h3>Job Family Group: </h3>Technology------------------------------------------------------<h3>Job Family:</h3>Architecture------------------------------------------------------<h3>Time Type:</h3>Full time------------------------------------------------------<h3>Primary Location:</h3>Irving Texas United States------------------------------------------------------<h3>Primary Location Full Time Salary Range:</h3>$170,000.00 - $300,000.00In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental &amp; vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.------------------------------------------------------<h3>Most Relevant Skills </h3>Please see the requirements listed above.------------------------------------------------------<h3>Other Relevant Skills </h3>Amazon Web Services (AWS), Application Security, Architecture Frameworks, Cyber Security Architecture, Google Cloud Platform (GCP), Microsoft Azure, NIST Standards, Security Framework.------------------------------------------------------<h3>Anticipated Posting Close Date:</h3>May 02, 2026------------------------------------------------------Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View Citi’s <a href="https://www.citigroup.com/global/eeo-aa-policy" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a> and the <a href="https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Know Your Rights</a> poster.

Cloud and Application Security Architect, Director

This is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks on a 24x7 basis. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.Responsibilities:<ul><li>As a key member of the Security Operations Center team, the analyst's primary responsibilities will include:<ul><li>Actively monitoring, researching, and assessing security events to identify and analyze web application attacks and digital fraud.</li><li>Specialized in detecting and responding to threats such as Account Takeovers (ATO), Distributed Denial of Service (DDoS) attacks, common web application vulnerabilities (e.g., Cross-Site Scripting, SQL injection, command injection), and anomalies in financial transactions.</li></ul></li><li>Follow pre-defined actions to handle BAU and high severity issues including escalating to other support groups.</li><li>Execute daily ad hoc tasks or lead small projects as needed.</li><li>Perform assessment as well as troubleshooting to help isolate technical issues with the integration of fraud monitoring technologies</li><li>Identify areas for tuning use cases to enhance monitoring value.</li><li>Engage with Fraud Policy, Operations, Strategy and other teams for early detection, prevention, and mitigation of detected fraudulent activities.</li></ul>Job Skills:<ul><li>Strong knowledge of current Digital Fraud trends including common Account Takeover techniques.</li><li>Deep understanding of Application Layer Protocols (HTTP) and OWASP Top 10, including detection of common web application vulnerabilities.</li><li>Knowledge of cutting-edge threats and technologies affecting Web Applications. </li><li>The following experiences will be considered a plus:<ul><li>Experience with vulnerability assessment as well as penetration testing.</li><li>Experience w­ith any scripting language and Splunk.</li><li>Understanding of various operating systems (Windows/UNIX), and web technologies (focusing on Internet security). </li><li>Experience with Big Data Technologies, ETL Tools, Data Warehouse and Business Intelligence technologies. </li></ul></li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Proven influencing and relationship management skills</li><li>Proven strong analytical skills</li><li>Attentive to detail and possess a strong investigative mindset</li><li>A good team player, self-driven and able to act as individual contributor</li></ul>Qualifications:<ul><li>5-8 years of relevant experience in SOC.</li><li>Relevant experience in cyber fraud is a plus.</li><li>Following Certifications will be considered a plus: [CISSP, GWAPT and CFE].</li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent experience</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.Regular weekly work shift will include one of the weekends (e,g, Saturday Or Sunday).#LI-Hybrid------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Most Relevant Skills Please see the requirements listed above.------------------------------------------------------Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View Citi’s <a href="https://www.citigroup.com/global/eeo-aa-policy" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a> and the <a href="https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Know Your Rights</a> poster.

Security Operation Center (SOC) Cyber Fraud and Web Application Defense Analyst - Assistant Vice President

Overview of the Role Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations &amp; Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.Role OverviewThe SIEM Content Developer is a senior-level cybersecurity professional responsible for designing, implementing, and maintaining high-fidelity SIEM detection and monitoring content. This role translates security requirements, threat intelligence, and incident response playbooks into effective detective controls that enable accurate, timely detection and response to cyber threats.The position plays a critical role in executing Information Security directives by delivering scalable, reliable, and risk-aligned detection capabilities in accordance with Citi’s Data Security Policy.<h3>Key Responsibilities</h3><h3>SIEM Detection Engineering</h3><ul><li>Lead the design, development, testing, deployment, tuning, and optimization of advanced SIEM content within Splunk Enterprise Security.</li><li>Develop and maintain correlation rules, alerts, dashboards, and reports that proactively identify and prioritize security threats for SOC investigation and response.</li><li>Translate threat intelligence, incident response playbooks, and common attack techniques into robust Splunk ES use cases aligned to frameworks such as MITRE ATT&amp;CK and NIST.</li></ul><h3>Content Quality &amp; Optimization</h3><ul><li>Identify and remediate false positives, false negatives, logic gaps, data dependencies, and other quality issues in SIEM content.</li><li>Analyze and enhance SPL queries, detection logic, enrichment logic, macros, lookups, and supporting artifacts to improve accuracy, reliability, and maintainability.</li><li>Perform root-cause analysis of detection gaps and alert fidelity issues, assess risk, and implement corrective actions.</li></ul><h3>Data &amp; Platform Enablement</h3><ul><li>Optimize data onboarding, parsing, normalization, event processing, data models, and data quality to ensure effective security monitoring.</li><li>Support Splunk administration activities (e.g., app configuration, performance tuning) as needed to enable detection engineering objectives.</li></ul><h3>Automation &amp; Process Improvement</h3><ul><li>Identify opportunities to automate and standardize detection engineering workflows, content lifecycle management, and security controls.</li><li>Review and validate automated testing results, prioritizing remediation based on risk, detection coverage, and operational impact.</li></ul><h3>Collaboration, Risk &amp; Governance</h3><ul><li>Partner with security operations, engineering, and business stakeholders to deliver secure, scalable detection solutions.</li><li>Assess and manage risk in alignment with regulatory expectations, Citi policies, and ethical standards.</li><li>Escalate and report control issues transparently while safeguarding Citi, its clients, and assets.</li></ul><h3>Qualifications</h3><h3>Experience &amp; Technical Skills</h3><ul><li>6–10 years of progressive experience in information security, with deep focus on SIEM and detection engineering.</li><li>Expert-level experience with Splunk Enterprise and Splunk Enterprise Security, including: <ul><li>Advanced SPL development</li><li>Correlation searches and alert tuning</li><li>Dashboards, reports, and data models</li><li>Detection performance and content optimization</li></ul></li><li>Proven experience building advanced threat detection use cases, including insider threat, malware, APTs, and cloud security.</li><li>Strong understanding of security frameworks, adversary tactics, and detection mapping (MITRE ATT&amp;CK, NIST).</li></ul><h3>Additional Qualifications</h3><ul><li>Hands-on experience supporting Splunk administration and data onboarding in a security context.</li><li>Strong analytical, problem‑solving, and communication skills.</li><li>Demonstrated ability to influence stakeholders and manage cross‑functional relationships.</li><li>Scripting experience (e.g., Python) for automation, enrichment, or API integrations is a strong plus.</li><li>Splunk certifications (Enterprise Admin, ES Certified Admin) preferred but not required.</li><li>Proficiency with Microsoft Office tools.</li></ul>------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Primary Location:Irving Texas United States------------------------------------------------------Primary Location Full Time Salary Range:$125,760.00 - $188,640.00In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental &amp; vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.------------------------------------------------------Most Relevant Skills Please see the requirements listed above.------------------------------------------------------Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------Anticipated Posting Close Date:Apr 28, 2026------------------------------------------------------Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View Citi’s <a href="https://www.citigroup.com/global/eeo-aa-policy" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a> and the <a href="https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Know Your Rights</a> poster.

SIEM Content Developer, VP

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Email Security Senior Analyst (Vice President) at City	Full Time CISM Analyst GCFA
Cloud and Application Security Architect, Director at City	Full Time CISO Audit Chief Application Security
Security Operation Center (SOC) Cyber Fraud and Web Application Defense Analyst - Assistant Vice President at City	Full Time Analyst Windows
SIEM Content Developer, VP at City	Full Time Incident Response

Cyber Security Jobs

24 Cyber Security Jobs. Page 2 of 2

Subscribe to the weekly
Cyber Security Jobs Newsletter