Senior Vice President, Cyber Security Cloud Threat Modeling Analyst

$156,160 - $234,240/Yr

Citigroup - Irving, TX

Full-time - Mid Level

Irving, TX

10,001+ employees

Credit Intermediation and Related Activities

About the position

Citi is seeking a security-focused individual with a strong understanding of cybersecurity principles to join the Cloud Threat Modeling team. This role involves identifying threats and specifying mitigating controls to reduce risks associated with operating in the public cloud. The ideal candidate will contribute to the development of automation tools, maintain high standards in threat identification, and support the lifecycle of identified threats and controls.

Responsibilities

• Conduct threat modeling using a documented process.
• Develop automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attend to the lifecycle of identified threats and controls.
• Deliver threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Train newer members of the team.
• Supervise junior members of the team.
• Run parts of the threat model service.
• Assist in the wider threat modeling activities across Citi.
• Work with little supervision to complete work.

Requirements

• 5+ years of experience in IT, with a minimum of 4 years in Cyber-Security/Information Security.
• Experience in Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck).
• Ability to identify vulnerabilities using CWE or OWASP.
• Experience working in a cyber-security role.
• Knowledge of security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, and network/segmentation.
• Familiarity with operating systems and their hardening.
• Understanding of development concepts (CICD, Pipelines, SDLC).
• Proficiency in scripting languages and Infrastructure as Code (Terraform, CloudFormation).
• Experience with Cloud Development Kit (CDK), GitOps, and operating in a DevOps/agile team structure.
• Familiarity with Jira or other ticketing systems.
• Understanding of docker/K8S/serverless/helm.
• Experience with Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Ability to design and review technical architectures.

Nice-to-haves

• Analytical skills, diligence, and attention to detail.
• Eagerness to research using vendor documentation.
• Experience in a regulated environment.
• Adversary mindset.
• Ability to work with a diverse set of people and teams.
• Constant learner of new technologies and methodologies.
• Strong problem-solving skills.
• Excellent communication and collaboration skills.
• Ability to build relationships across cross-functional teams.

Benefits

• Medical, dental & vision coverage
• 401(k)
• Life, accident, and disability insurance
• Wellness programs
• Paid time off packages including vacation, sick leave, and paid holidays