Total 7 job vacancies by Citibank N.a.

Authentication Platforms Integration - Analytics and Operational Assurance team is responsible for the integration of the Authentication platforms infrastructure for the purposes of Observability, Analytics, and Monitoring. This role is part of a larger global team responsible for managing the integration of authentication platforms that are leveraged by all businesses across Citi.

Key Responsibilities

• Work with production support teams to identify all observability requirements for development, testing and production, including:Gather monitoring, analytics requirements, including both dashboard and report visualizations
  Develop a solution using existing tools for meeting these requirements
  Implementing these solutions, including documentation and knowledge transfer.
  
• Perform post-deployment testing of solutions in individual environments.
• Troubleshooting incidents and problems in a timely resolution as defined in SLAs.
• Capacity, Performance and Stability validations.

No scheduled on-call requirements, but some ad-hoc requirements to resolve critical issues during weekends and outside working hours expected.

Experience and Skills

Must-have Skills:
3+ years’ relevant industry experience in:

• Bachelor's Degree (Engineering, Mathematics, or IT related field) or equivalent work experience.
• Experience with critical production support, upgrades, and project lifecycle/ SDLC processes.
• Well versed with creating Python scripting and/or Shell scripting.
• Knowledgeable in Observability fundimentals and principles

Desired Skills:

• Well versed in AppDynamics or similar Observability Platform.
• Conversant in Linux-based environments (preferably RHEL) that includes being conversant in terminal commands and developing shell scripts.
• Familiarity with IT Service Management processes and tools such as a Service Now.
• Exposure to one or more of the following:Splunk queries/processing language
  Platforms such as Angular or Tomcat
  BI product such as Tableau
  Autosys scheduling and promotion.
  Github/Bitbucket for source code management

The Emerging Threat Analyst role is an intermediate level position responsible for driving efforts to detect, monitor, and prevent emerging cyber threats with the potential to lead to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

As an Emerging Threat Analyst, your role is to monitor, identify, and analyze new and evolving threats to Citi's information systems, networks, and data. You'll stay at the forefront of emerging technologies, vulnerabilities, threat actors, and attack vectors leveraging this knowledge to anticipate and mitigate future potential risks. Collaborating with cross-function teams, you'll develop proactive strategies and countermeasures to protect against these emerging cyber threats (or near-term threats), ensuring resilient and strong controls and/or mitigations. You will help create actionable dashboards to identify these threats. You'll author expert reports and provide recommendations for enhancing defensive capabilities. This role also requires the ability to assess and analyze large data sets to identify potential threats and trends. Strong analytical skills, a deep understanding of cyber principles, big data experience, creativity, and a proactive mindset are essential for success in this dynamic and critical role.

Responsibilities:

• Develop corrective action language for Information Security (IS) gaps and ensure risk closure meets Citi requirements or industry best practices.
• Facilitate the implementation of approved IS tools and identify/recommend new or improved security solutions or emerging technologies.
• Mitigate risk by analyzing the root cause of issues, impacts to business, and required corrective actions and develop security solutions.
• Ensure IS compliance and seek opportunities to enhance the efficiency of IS policies and procedures.
• Identify significant IS threats and vulnerabilities, and define appropriate controls for discovered threats, documenting the business response.
• Analyze large data sets.
• Disseminate changes to IS regulations and standards to Business and Program owners.
• Provide Information Security advice and counsel as needed.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
• Serve as a conduit between technology and business teams and provide support on a wide range of threat intelligence projects, including the ability to identify, collect, and analyze multiple data sources
• Support incident response function in Singapore.

Qualifications:

• 5-10 years of relevant experience.
• Additional technical certifications are preferred.
• Demonstrated ability to research and apply current information regarding the IS field.
• Consistently demonstrates clear and concise written and verbal communication.
• Proven influencing and relationship management skills.
• Proven analytical skills.
• Intelligence and investigations experience with detailed knowledge in data analytics, cyber security protocols, cyber threat intelligence, and cyber-fraud investigations.
• Experience supporting client matters while meeting tight deadlines and customer requirements.
• Experience in one or more cybersecurity functions such as Cyber Threat Intelligence, Threat Hunting, System Administration, Intrusion Detection / Prevention, Monitoring, Incident Response, or Digital Forensics.
• Familiarity with the NIST Cybersecurity Framework, Center for Internet Security Critical Security Controls.

Education:

• Bachelor's degree in IT, Computer Science, Intelligence, or equivalent experience.
• Master’s degree preferred.

Job Description

The Network Services Support (NSS) team under CTI (Citi Technology Infrastructure), provides 24x7x365 network support in a dual hemisphere, 12hours shift rotation, follow the sun model with one command center in Irving, Texas and the other in Singapore. Each center provides real-time backup for the other enabling efficient transfer of operations.

The NSS supports over 45,000 Network devices including 15,000 data circuits across 103 countries covering North America, Latin America, EMEA, Asia Pacific regions. The NSS is the single point of contact for all network related issues and provides end to end support for the Global Citi network.

As a team member of Network Services Support, your responsibilities includes:

• Providing Technical Support for the firm’s global network with a focus on both network infrastructure projects and infrastructure break fixes.
• To represent Network Services Support (NSS) professionally on conference calls with cross functional partners throughout the technology organization while conducting in depth technical investigations of ongoing incidents involving network connectivity and performance issues.
• Ensuring infrastructure changes, authorization requests, communications to stakeholders for post change testing, arrangement of hardware replacements are completed complying with established process and execute due diligence in planning to prevent causing disruption of services, in compliance with defined IT processes and procedures.
• Display competency and professionalism on conference calls for major incidents which may or may not be due to a failure in NSS managed technology infrastructure. Ability to drive major incident calls as the lead network representative with assertiveness, logical troubleshooting along with clear and concise communication towards both external and internal stakeholders.
• Performs post mortem Root Cause Analysis for complex, high visibility issues or major incidents within tight timeline and the ability to drive vendors assertively to produce justifiable root causes in a professional manner.
• Maintain focus and poise during the support cycle and work through all challenges with a results-oriented attitude and relentless focus on enhanced customer service through rapid incident resolution.
• Collaborate and communicate accurately with people at different technical knowledge level ranging from Subject Matter Experts, Services Managers to Vendor Support Teams, etc, with the goal of aligning all parties towards achieving incident resolution as quickly as possible.
• Good understanding of Software defined networking (SDN) technologies concepts and the evolution and deployment approaches of SDN technology across traditional IP networks.
• Perform pre-defined configuration assurance/standard checks to satisfy Risk & Control and Safety & Soundness initiatives as part of proactive configuration management of all NSS managed technology infrastructure.
• Refine and improve existing processes to accomplish the desired results with better efficiencies and effectiveness.
• Maintain written operational procedures for the organization including document reviews at predefined intervals, ad-hoc procedure updates in response to operational events, and consistently high quality document management.


Skills and Experience Required

• 7+ years of experience in providing network operations supporting a network with 1000+ nodes.
• NOC (Network Operations Center) experience or large financial institution network operation/implementation experience is highly preferred.
• Expert level working knowledge of enterprise TCP/IP communications (IPv4, QoS, IPSEC, VPN, etc)
• Experience in supporting Load Balancers, DNS, DHCP.
• Strong knowledge of network protocol analysis using industry standard toolsets such as Wireshark capable of performing in-depth packet capture analysis.
• Expert working knowledge following routing protocols: BGP, OSPF, RIP, Multicast
• Strong working knowledge of IPSLA probes, EEM Applets, application specific network performance analysis, and TCP/IP optimization mechanisms for maximizing application performance across enterprise networks
• Strong working knowledge of common security threats facing enterprise networks including DDOS (Distributed Denial of Service) and various defensive mechanisms and threat mitigation strategies.
• Industry certifications includes; CCNP, CCIE, JNCIS, JNCIP, etc
• Strong knowledge in SDWAN technology.
• Intermediate to Expert software or programming knowledge in Python, JSON, Certified Scrum Master, NSO and in Terraform, AWS (Solutions Architect), Kubernetes, is a plus.

General Attributes, Characteristics, and Capabilities

• Highly assertive communications skills, commanding personality while maintaining professionalism. Ability to engage a large audience and lead the discussion with clear, concise, and highly assertive communication.
• Capable of understanding customers’ requirements and setting the correct expectation to stakeholders to prevent re-work or incorrect project delivery.
• Effective prioritization skills and high energy. Ability to work in a fast-paced network operations environment. Ability to work under pressure with conflicting priorities and a fluctuating and potentially voluminous operational and project based workload.
• Ability to articulate technical information to large audience with various levels of technical knowledge base, including a business management audience that may lack a deep technical understanding of internetworking technology solutions. Ability to drive communication between business leaders and IT. Must exhibit sound and comprehensive communication and diplomacy skills to exchange complex information with inherent confidence.
• High sense of urgency and commitment to exceed customer expectations. Strong personal work ethic, inspires excellence and enthusiasm amongst peer group
• Resilient and highly responsive in overcoming adversity, ability to work through a multitude of challenges/obstacle in order to achieve the desired end result
• Process oriented; self-disciplined and settles well into established systems and structures. Focuses on the journey as well as the destination.
• Ability and flexibility to operate within tightly controlled operational procedures. Proficiency in managing customer satisfaction requirements within the confines or operational procedures to achieve a suitable outcome for all stakeholders.
• Demonstrated technical competencies and history of increased responsibilities during previous three years. Strong dedication towards continual growth and self-improvement including year-over-year progression in industry certifications and overall technical proficiencies and knowledge base.
• Strong analytical, organizational, written and interpersonal skills

At Citi, we get to connect millions of people across hundreds of cities and countries every day. And we've been doing it for more than 200 years. We do this through our unparalleled global network. We provide a broad range of financial services and products to our clients – whether they be consumers, corporations, governments or institutions – to help them meet their biggest opportunities and face the world's toughest challenges.

Shape your Career with Citi

Citi’s Wealth brings together the full power of Citi to serve the entire continuum of wealth clients, from affluent to ultra-high net worth to family offices. The strategies we create help our clients maintain liquidity while maximizing yields, transact in foreign currency and across borders, and manage fluctuating expenses or cash flow. We are uniquely suited to helping our clients meet their banking needs across regions through our global network.

We’re currently looking for a high caliber professional to join our team as Officer, Securities & Derivatives Analyst - Hybrid (Internal Job Title: Securities & Derivatives Analyst 2 – C10) based in Singapore. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future. For instance:

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• We empower our employees to manage their financial well-being and help them plan for the future.
• Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.
• We have a variety of programs that help employees balance their work and life, including generous paid time off packages.
• We offer our employees resources and tools to volunteer in the communities in which they live and work. In 2019, Citi employee volunteers contributed more than 1 million volunteer hours around the world.

In this role, you’re expected to:

• Support trade capture management, trade documentation and securing approvals for product risk rating and loanable value
• Ensure seamless derivative trade lifecycle events management
• Provide analytical and administrative support to sales team, product desks and business execution teams with regards to derivatives and securities transactions
• Minimize processing risk and perform root cause analyses of discrepancies or spikes in trade position, and ensure adherence to audit and control policies
• Escalate all issues in a timely manner and oversee client and business ad-hoc queries and requirements
• Provide informal guidance and/or on-the-job-training to team members
• Support team during peak volume periods and other absences and support the on-boarding and training of new employees
• Proactively work with Tech to resolve production issues
• Participate in UAT testing, review test cases and/or test evidences
• Ensure team procedures and audit requirements are updated, completed and maintained across processes
• Review existing processes / applications and identify opportunities for improvement
• Be an SME in a set of products/processes and represent the team in cross-unit discussions

As a successful candidate, you’d ideally have the following skills and exposure:

• Relevant Degree or equivalent experience
• More than 2 years’ Experience in cash FX, derivatives, structured product or fixed income related functions
• Efficient and effective with numerical tasks and transactions
• Proven success with working in a team environment
• Ability to work under pressure and manage to deadlines
• Ability to work in a fast-paced environment
• Consistently demonstrates clear and concise written and verbal communication
• Attention to detail and intermediate problem solving skills
• Bachelor’s Degree/University degree or equivalent experience in Business, Accou

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei

The Vulnerability Assessments Analyst - Red Team, AVP will participate in the Adversary Emulation program by emulating cyber and criminal threat actors targeting Citi. The candidate will conduct Intelligence-led Red Team Testing and Penetration Testing targeting people, process, and technology. The candidate may also conduct regulatory driven Red Team Testing. To be successful in this role, the ideal candidate will have some experience in the following:

Responsibilities

• Support Citi’s Red, Blue, and Purple Teams during the execution of offensive security assessment operations
• Participate in advanced exploitation operations against a large global enterprise, including Red and Purple Team operations
• Identify opportunities to automate and standardize information security controls and for the supported groups
• Resolve any vulnerabilities or issues detected in an application or infrastructure
• Analyze source code to mitigate identified weaknesses and vulnerabilities within the system
• Review and validate automated testing results and prioritize actions that resolve issues based on overall risk
• Scan and analyze applications with automated tools, and perform manual testing if necessary
• Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
• Assist the development and delivery of secure solutions by coordinating with business and technical contacts
• Assist in assessing risk when making business decisions
• Demonstrate particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency

Qualifications

2+ years’ experience or equivalent knowledge and exposure are required with most of the following:

• Assisting in attack surface management
• Leveraging the MITRE ATT&CK Framework
• Helping to conduct Adversary Emulations or Assumed Breach Exercises
• Familiarity with industry Adversary Emulation Frameworks like PTES, CBEST, iCAST, GFMA
• Knowledge of tools and processes used to expose known and undocumented vulnerabilities in various different systems
• Assisting with Purple Team Testing
• Participation in Cyber Tiger Team operations
• Helping with Vulnerability Assessments and Penetration Testing (application and/or infrastructure) and articulating security issues to technical and non-technical audience
• Identifying, researching, validating, and exploiting various different, known, and unknown security vulnerabilities on the server and client side
• Red Team testing tools: Cobalt Strike, Red Team Toolkit, etc.
• Vulnerability Assessment tools: Nessus, Qualys, etc.
• Exploitation frameworks: Metasploit, CANVAS, Core Impact
• Social Engineering campaigns: email phishing, phone calls, SET
• An understanding of OSI model
• Security devices: Firewalls, VPN, AAA systems
• OS Security: Unix/Linux, Windows, OSX
• Understanding of common protocols: HTTP, LDAP, SMTP, DNS
• Web application infrastructure: Application Servers, Web Servers, Databases
• Web development and programming languages: Python, Perl, Ruby, Java, .Net
• Reporting information security vulnerabilities to the business

Education:

• Bachelor’s degree/University degree or equivalent experience
• Industry-accredited security certifications highly preferred but not required (e.g. PNPT, OSCP, OSCE, GXPN, GPEN, GCIH, GWAPT, GCFA, or CISSP)

Duties include being the functional lead for the Adversary Emulation program within Citi’s Red Team. Functional leads develop, design, and execute services within the Red Team as well as work and help other members perform offensive security services. The successful candidate will have verifiable experience in adversary emulation (Red Team), regulatory red team testing (TLTP), and extensive offensive security experience, and understanding risk to the organization and how to properly mitigate that. This role will be one of the keys to maturing out the overall red team program within Citi and needs to understand not only technical capabilities but how to apply these to an organization while recognizing operational requirements.

Responsibilities:

• Design and develop adversary emulation exercises (internal, vendor driven, and regulatory)
• Developing and applying documentation, processes, and procedures to a program
• Experience leveraging advanced exploits within an environment
• Conducting Vulnerability Assessments and Penetration Testing (application and/or infrastructure) and articulating security issues to technical and non-technical audience
• Identifying, researching, validating, and exploiting various, known, and unknown security vulnerabilities on the server and client side
• Red Team testing tools. e.g., Cobalt Strike, Red Team Toolkit.
• Vulnerability Assessment tools. e.g., Nessus, Qualys, etc
• Exploitation frameworks, e.g., Metasploit, CANVAS, Core Impact
• Social Engineering campaigns. e.g. email phishing, phone calls, SET
• Deep understanding of OSI model
• Security devices, i.e. Firewalls, VPN, AAA systems
• OS Security. e.g. Unix/Linux, Windows, OSX
• Understanding of common protocols. e.g. HTTP, LDAP, SMTP, DNS
• Web application infrastructure. e.g. Application Servers, Web Servers, Databases
• Web development and programming languages. e.g. Python, Perl, Ruby, Java, .Net
• Direct the development and delivery of secure solutions by coordinating with business and technical contacts
• Appropriately assess risk when business decisions are made, demonstrating consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• 7+ years of relevant experience
• Proven experience with scripting and programming languages preferred
• Proven experience working with regulatory red team frameworks (World wide)
• Advanced Microsoft Office skills preferred
• Demonstrated ability to collaborate with a variety of analytical groups and service delivery organizations
• Advanced analytical and problem solving skills
• Consistently demonstrates clear and concise written and verbal communication
• Certifications if possible PNPT, OSCP, OSCE, GXPN, GPEN, GCIH, GWAPT, GCFA, or CISSP.
• Proficient in interpreting and applying policies, standards and procedures
• Demonstrated ability to remain unbiased in a diverse working environment

Education:

• Bachelor’s degree/University degree or equivalent experience
• Master’s degree preferred

At Citi, we get to connect millions of people across hundreds of cities and countries every day. And we've been doing it for more than 200 years. We do this through our unparalleled global network. We provide a broad range of financial services and products to our clients – whether they be consumers, corporations, governments or institutions – to help them meet their biggest opportunities and face the world's toughest challenges.

Shape your Career with Citi

Citi’s Wealth brings together the full power of Citi to serve the entire continuum of wealth clients, from affluent to ultra-high net worth to family offices. The strategies we create help our clients maintain liquidity while maximizing yields, transact in foreign currency and across borders, and manage fluctuating expenses or cash flow. We are uniquely suited to helping our clients meet their banking needs across regions through our global network.

We’re currently looking for a high caliber professional to join our team as Officer, Securities & Derivatives Junior Analyst - Hybrid (Internal Job Title: Securities & Derivatives Analyst 1 – C09) based in Singapore. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future. For instance:

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• We empower our employees to manage their financial well-being and help them plan for the future.
• Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.
• We have a variety of programs that help employees balance their work and life, including generous paid time off packages.
• We offer our employees resources and tools to volunteer in the communities in which they live and work. In 2019, Citi employee volunteers contributed more than 1 million volunteer hours around the world.

In this role, you’re expected to:

• Support trade capture management, trade documentation and securing approvals for product risk rating and loanable value
• Ensure seamless derivative trade lifecycle events management
• Provide analytical and administrative support to sales team, product desks and business execution teams with regards to derivatives and securities transactions
• Minimize processing risk and perform root cause analyses of discrepancies or spikes in trade position, and ensure adherence to audit and control policies
• Escalate all issues in a timely manner and oversee client and business ad-hoc queries and requirements
• Provide informal guidance and/or on-the-job-training to team members
• Support team during peak volume periods and other absences and support the on-boarding and training of new employees
• Proactively work with Tech to resolve production issues
• Participate in UAT testing, review test cases and/or test evidence

As a successful candidate, you’d ideally have the following skills and exposure:

• Relevant Degree or equivalent experience
• Efficient and effective with numerical tasks and transactions
• Proven success with working in a team environment
• Ability to work under pressure and manage to deadlines
• Bachelor’s degree/University degree or equivalent experience

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today

https://jobs.citi.com/dei