Vulnerability Threat Management Triage Analyst

Role

Vulnerability Threat Management Triage Analyst

Duration

12 Months

Location

3+ Days onsite either Irving, TX (DFW) or Tampa, FL

Role Overview

The Vulnerability Threat Management Triage Analyst is a critical cybersecurity role responsible for the rapid analysis and triage of incoming vulnerabilities. This position serves as a subject matter expert, leading efforts to assess threats for risk, potential impact, and exploit status within the Citi environment. The ideal candidate is a cybersecurity SME who can think fast, act quickly, and work proactively to prevent, monitor, and respond to potential cyber-attacks.

Key Responsibilities

• Perform daily, in-depth analysis of critical vulnerabilities from various intelligence sources to determine their risk, potential impact, and relevance to Citi's technology landscape.
• Investigate the use and exposure of vulnerable technologies across the firm by self-serving technology data through database queries and by investigating individually with engineering teams and product owners.
• Assess the exploit status of vulnerabilities, leveraging threat intelligence and security research to prioritize remediation efforts effectively.
• Coordinate the analysis and delivery of actionable Information Security Vulnerability Findings to internal stakeholders, providing clear, interpretative analysis.

Ideal Candidate Profile

Essential Qualifications

Experience

5+ years of work experience in Information Security, specifically with a strong background in vulnerability management and threat analysis.

Education

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.

Vulnerability Analysis

Deep understanding of Information Security and Vulnerability Management processes, patch development, and application/system architecture.

Data & Scripting

Strong proficiency with SQL for database querying and data analysis.

Communication

Fluent in English with a proven ability to articulate complex technical findings and translate them for both technical and business stakeholders.

Analytical Mindset

Proven analytical and problem-solving skills, with the ability to perform research, assessment, and analysis under pressure.

Preferred Qualifications

Programming/Scripting

Knowledge of a programming and/or scripting language, with a strong preference for Python.

Scanning Tools

Experience with or knowledge of industry-standard scanning tools (e.g., Qualys, Snyk).

Statistics

Good knowledge of descriptive statistics for metrics and reporting.

Office Suite

Proficiency with the Microsoft Office Suite.

Additional Skills

• Excellent problem-solving abilities.
• Adaptable and open to change in a fast-paced environment.
• Eager to learn and continuously develop skills.
• Ability to "think out of the box" to find solutions.
• Strong team player with excellent collaboration skills.