CrawlJobs Logo
Citi Logo Citi · IT - Administration

Email Security Senior Analyst

Hungary, Budapest · Job Posted January 15, 2026
Apply Position
Job Link Share

Job Description

The Email Security Senior Analyst is responsible for providing expert support and leadership to email security and brand protection functions, projects, and programs. They will be responsible for interactions with vendors, employees, and stakeholders of the team’s services. The Email Security Senior Analyst will provide operational support, intelligence gathering, project and program management, analysis and report development, publishing, and briefing. Besides managing aspects of the day-to-day function of these programs, he or she will partner with various cyber and information security teams to enhance current solutions and find new solutions to stay ahead of the ever-changing cyber threat. The position will require substantial collaboration with other members of the team and across other Cyber Security Operations teams ensuring appropriate email security support and solutions are triaged appropriately.

Job Responsibility

  • Provide expertise and experience to existing and future functions and projects focused on email threats and controls.
  • Actively monitor and research cyber threats with a direct or indirect impact to the Citi brand
  • Analyze and provide oversight of analysis of email threats and controls
  • Provide leadership, solution design, and hands-on development support for email security controls
  • Develop and manage processes to track identified incidents to resolution
  • Develop weekly, monthly, quarterly, and annual metrics and reports as needed
  • Develop written analytical reports and give presentations on findings
  • Triage information received from vendors and process that information through previously defined internal workflows
  • Manage third party vendors to ensure proper delivery of services
  • Manage meetings with internal stakeholders to address open issues and identify process improvements
  • Actively engage in liaison activities with intelligence communities, industry associations, peer institutions, and information sharing communities
  • Apply developed communication and diplomacy skills to guide and influence decision makers
  • Keep up to date with the ever-changing cyber security landscape to remain relevant and knowledgeable through internal and external certifications.

Requirements

  • Highly technical and analytical expertise, with a proven deep background (preferred 5+ years’ IT experience in addition to cybersecurity) in technology design, implementation, and delivery.
  • Minimum 3+ years working in security engineering or security operations role, with a focus on email security
  • Strong experience with configuration, administering, troubleshooting email routing and filtering in Exchange, Exchange Online, Proofpoint and other enterprise level email security gateways (such as inbound routes, whitelists, email firewall rules, spam/AV, logging/reporting, TAP, TRAP, domain rewrites, secure messaging and recipient verification).
  • Experience in analyzing domain email activity and deploying SPF, DKIM and DMARC authentication
  • Strong understanding of and demonstrated experience with the tools and sources available to conduct email and threat analysis
  • Experience with enterprise phishing defense concepts and technologies
  • Cross-functional understanding of email operations, security practices and the user experience
  • Knowledge and experience creating and maintaining policies, standard operating procedures (SOPs) and technical documents
  • Ability to identify and develop new processes to address cross-functional and cross-business requirements and implement
  • Ability to manage projects and ensure tasks are being met timely. Work with leaders of Cyber Security Operations teams to track, drive and report on strategic initiatives.
  • Ability to organize and appropriately prioritize multiple, ongoing tasks via efficient time management and forecasting. Project management skills a plus
  • Ability to work independently, as well as in team situations, to help internal and external customers achieve desired results
  • Experience with data analysis and data visualization
  • Demonstrated capability to produce written products on a reoccurring basis by working with cross-functional and cross-enterprise teams
  • Strong written and verbal communication and presentation skills
  • Communication and presentation skills to senior client and senior internal stakeholder meetings
  • Weekend and holiday coverage may be required
  • Bachelor’s degree or equivalent work experience
  • IS Certifications are desired (CISSP, GSEC, GCFA, GREM, Security+, CISA, CISM).
  • Email vendor certifications a plus.

Nice to have

  • Project management skills a plus
  • Email vendor certifications a plus.

What we offer

  • Cafeteria Program
  • Home Office Allowance (for colleagues working in hybrid work models)
  • Paid Parental Leave Program (maternity and paternity leave)
  • Private Medical Care Program and onsite medical rooms at our offices
  • Pension Plan Contribution to voluntary pension fund
  • Group Life Insurance
  • Employee Assistance Program
  • Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
  • Flexible work arrangements to support you in managing work - life balance
  • Career progression opportunities across geographies and business lines
  • Socially active employee communities with diverse networking opportunities.
Citi - All Job Offers

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Suggested Tags: Frontend Developer Secretary Talent Manager Salesforce Administrator Data Analyst
Similar Jobs for

Email Security Senior Analyst

8 matching positions

Email Security Senior Analyst (Vice President)

The Email Security Senior Analyst is responsible for providing expert support an...
Location
Location
Singapore , Singapore
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree or equivalent work experience
  • IS Certifications are desired (CISSP, GSEC, GCFA,GREM, Security+, CISA, CISM). Email vendor certifications a plus
  • Strong experience with configuration, administering, troubleshooting email routing and filtering in Exchange, Exchange Online, Proofpoint and other enterprise level email security gateways (such as inbound routes, whitelists, email firewall rules, spam/AV, logging/reporting, TAP, TRAP, domain rewrites, secure messaging and recipient verification)
  • Experience in analyzing domain email activity and deploying SPF, DKIM and DMARC authentication
  • Experience with enterprise phishing defense concepts and technologies
  • Minimum 3+ years working in security engineering or security operations role, with a focus on email security
  • Cross-functional understanding of email operations, security practices and the user experience
  • Highly technical and analytical expertise, with a proven deep background (preferred 5+ years’ IT experience in addition to cybersecurity) in technology design, implementation, and delivery
  • Strong understanding of and demonstrated experience with the tools and sources available to conduct email and threat analysis
  • Ability to identify and develop new processes to address cross-functional and cross-business requirements and implement
Job Responsibility
Job Responsibility
  • Provide expertise and experience to existing and future functions and projects focused on email threats and controls
  • Actively monitor and research cyber threats with a direct or indirect impact to the Citi brand
  • Analyze and provide oversight of analysis of email threats and controls
  • Provide leadership, solution design, and hands-on development support for email security controls
  • Develop and manage processes to track identified incidents to resolution
  • Develop weekly, monthly, quarterly, and annual metrics and reports as needed
  • Develop written analytical reports and give presentations on findings
  • Triage information received from vendors and process that information through previously defined internal workflows
  • Manage third party vendors to ensure proper delivery of services
  • Manage meetings with internal stakeholders to address open issues and identify process improvements
  • Fulltime
Read More
Arrow Right

Senior Security Analyst

You will work as part of a 24/7 Global Security Operations Centre. The Senior SO...
Location
Location
United Kingdom
Salary
Salary:
Not provided
admiralgroup.co.uk Logo
Admiral Group Plc
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 3+ years’ experience as a Senior SOC Analyst within an internal SOC environment
  • Strong experience in a SOC environment, including handling high‑severity incidents
  • Deep understanding of attacker tradecraft across endpoint, identity, cloud, and email attack surfaces
  • Hands‑on experience with SIEM, EDR, and security investigation platforms
  • Proven threat hunting experience using dashboards, structured queries, and behavioural analytics
  • Experience tuning detections and implementing well‑governed exclusions without increasing risk
  • Ability to clearly document investigations, decisions, and outcomes
  • Experience using AI or machine‑learning features within security products
  • Familiarity with SOAR workflows and automation concepts
  • Knowledge of detection engineering concepts and use‑case lifecycle management
Job Responsibility
Job Responsibility
  • Act as senior escalation point for complex/high-severity alerts across SIEM, EDR, cloud and identity platforms
  • Lead end-to-end incident response (investigation, containment, eradication, and post-incident review)
  • Correlate alerts with threat intelligence and business context to assess risk and impact
  • Produce clear investigation summaries for technical and non-technical stakeholders
  • Collaborate closely with Incident Response during escalations
  • Use AI-enabled features across SOC tooling to accelerate analysis and investigations
  • Apply strong judgement to validate AI outputs and avoid automation bias
  • Provide feedback to improve tooling, workflows, and AI effectiveness
  • Support development of safe and consistent AI usage standards within the SOC
  • Conduct proactive threat hunting using queries, dashboards and behavioural analytics
What we offer
What we offer
  • Up to £3,600 of free shares each year after one year of service
  • 33 days holiday (including bank holidays) increasing to up to 38 days
  • Option to buy or sell up to an additional five days of annual leave
  • Financial & Mortgage Advice
  • 24-Hour Ecare
  • Cycle to Work Scheme
  • Flexible Working
  • Simply Health
  • Private Health Cover
  • Critical Illness Cover
  • Fulltime
Read More
Arrow Right

Senior Cyber Security Analyst – Incident Response & SOC

We don’t hang up the leash until the job is done. Senior Cyber Security Analyst ...
Location
Location
Salary
Salary:
Not provided
zeektek.com Logo
Zeektek
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Email security fundamentals (SPF, DKIM, DMARC)
  • Phishing and malware investigations
  • DFIR / forensic investigation skills
  • Deep incident response experience
  • Threat analysis across multiple log sources
  • Hands-on tooling knowledge (EDR, SIEM, malware analysis, endpoint/network forensics)
  • Strong troubleshooting and scenario-based thinking
  • Strong written and verbal communication skills
  • Working knowledge of Data Loss Prevention concepts/products, Data Encryption concepts, and endpoint management
  • Technical knowledge of common network protocols and design patterns including TCP/IP, HTTPS, FTP, SFTP, SSH, RDP, CIFS/SMB, NFS
Job Responsibility
Job Responsibility
  • Leading investigations and serving as a subject matter expert while correlating data across multiple log sources and systems
  • Continually improving cyber security procedures and documentation to enhance the security posture of the organization
  • Communicating with users, vendors, and other IT personnel on security-related issues, providing expert guidance and support
  • Staying up to date on evolving cyber threats, identifying their impact, and detecting them in our environment
  • Managing infrastructure security systems such as HIDS/NIDS, SIEM, NGAV, EDR, UBA, WAF, DLP, and vulnerability management tools to meet regulatory requirements
  • Collaborating with business groups to establish and maintain strong working relationships
What we offer
What we offer
  • Weekly Direct Deposit
  • 401K Matching
  • Competitive medical, dental and vision insurance
  • Consistent communication throughout your project
  • ZeekTek Referral Program
Read More
Arrow Right

Senior Security Operations Analyst

As a Senior Security Ops Analyst at Vanta, you will be responsible for helping u...
Location
Location
Australia , Sydney
Salary
Salary:
119000.00 - 140000.00 USD / Year
vanta.com Logo
Vanta
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of experience in an information security role
  • Experience writing and responding to detections in cloud-native and remote-first environments
  • Proficiency in using security tools and technologies, such as SIEM, EDR, email security, and related tools
  • Excellent verbal and written communication skills, interpersonal, and teamwork skills
  • Prior demonstration of high initiative and problem-solving skills, especially in a fast-paced environment
  • Desire and willingness to learn
  • Ability to work independently
  • Helpful, resourceful and willing to help various teams succeed
  • Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact
Job Responsibility
Job Responsibility
  • Configure, maintain, and monitor security alerts and escalations from different tools and platforms
  • Monitor and distill global threat intelligence trends with potential impact on the business
  • Lead and drive incident response from detection, remediation, to prevention
  • Conduct incident root cause analysis and recommend actions to prevent future incidents
  • Configure new alerts based on trends or the results of threat hunts or alert triage
  • Identify, develop, and implement new processes in our security operations program
  • Respond to internal security-related questions and requests from Vanta’ns
  • Provide security and/or privacy expertise to support multiple teams
  • Support any function, team, or initiative that requires security expertise
  • Update and maintain documentation, playbooks, and investigation write-ups
What we offer
What we offer
  • Offers Equity
  • Eligible for medical benefits
  • 401(k) plan
  • Other company perk programs
  • Healthcare stipend towards health insurance for you and your dependents
  • 16 weeks paid Parental Leave for all new parents
  • Health & wellness stipend
  • Remote workspace, internet, and cellphone stipend
  • Commuter benefits for team members who attend the office
  • 20 days of Annual Leave per year
  • Fulltime
Read More
Arrow Right

Information Security Analyst

The SOC Analyst will be responsible for day-to-day security threats, vulnerabili...
Location
Location
United Kingdom , Belfast
Salary
Salary:
Not provided
apexclearing.com Logo
Apex Clearing
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • The permanent right to live and work in the United Kingdom - this job is based in Belfast, Northern Ireland
  • Bachelor’s degree in a related field (Security, Forensics, Cyber Security, or Computer Science is preferred) or equivalent industry related experience
  • At least 2 years' experience working within an information security / cyber security role
  • Desirable | Proven experience as a security analyst, incident handler/responder, security engineer, or penetration tester
  • Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&CK/D3FEND framework)
  • Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security)
  • Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications and email security
  • Good knowledge of common malware threats and attack methodologies
  • Basic knowledge of scripting languages and programming languages (PowerShell, Python, Bash, .NET, Ruby,Java, C, etc.)
  • Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, CySA+
Job Responsibility
Job Responsibility
  • Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR
  • Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise
  • Generate reports, dashboards, and presentations from security technologies
  • Able to participate in an on-call rotation and provide Tier 1 & Tier 2 support
  • Provide analysis of trending security data from a large number of heterogeneous security devices across different layers
  • Provide Incident Response (IR) support when analysis confirms an actionable incident
  • Communicate and collaborate with stakeholders, including internal customers and senior management to provide updates on security incidents and to ensure proper resolution
  • Investigate, document, and report on information security threats and emerging trends
  • Integrate technologies and share information with SOC analysts and external teams
  • Participate in internal projects and initiatives to increase SOC efficiency and improve SOC tooling
What we offer
What we offer
  • 28 days annual leave plus 10 NI national holidays
  • Pension matched up to 7%
  • Private health insurance for medical and dental
  • Life Insurance
  • Great work/life balance and flexible working hours
  • Monthly catered lunches
  • Unlimited drinks and snacks
  • Charitable matching gift program
  • Annual bonus
  • Training and development budget
  • Fulltime
Read More
Arrow Right

Senior Analyst

The Senior Analyst (Briefer) focus is the development, quality control, and deli...
Location
Location
United States , Fort Belvoir
Salary
Salary:
Not provided
chickasaw.com Logo
Chickasaw Nation Industries, Inc (CNI)
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Must possess an active Top Secret (TS) security clearance at the time of proposal submission and be able to attain Sensitive Compartmented Information (SCI) access by the issuance of the contract
  • Must be willing to undergo and pass a Counterintelligence Polygraph (CI Poly)
  • Must be a U.S. Citizen
  • Must obtain/retain a government background investigation commensurate with position requirements
  • Must have extensive experience in a Network Operations Center (NOC) environment
  • Possesses a results-focused mindset and superior communication skills (verbal and non-verbal) to effectively interface with military officials and senior leadership
  • Expertise in Microsoft Office and SharePoint to produce high-quality briefings and reports
  • Knowledge of the Military Decision Making Process (MDMP) and Army Intelligence processes
  • Experience as an action officer in an Army tactical, Army strategic, or Joint strategic military intelligence organization
  • Demonstrated experience operating at a Division level or higher
Job Responsibility
Job Responsibility
  • Responsible for developing all briefings, documentation, and reports covering the entire scope of activities for the Transport Network Operations
  • Develops, quality checks, and disseminates the daily Critical System Status Report via email to senior leadership
  • Provides in-person Critical System Status Report briefings to senior leadership daily (currently scheduled for 0730, subject to change)
  • Ensures the Readiness Dashboard or other provided status medium is updated within 30 minutes of any changes to system status or troubleshooting efforts
  • Coordinates all authorized system outages and facilitates effective knowledge sharing between multiple offices and personnel
  • Ensures that 95% of reports are delivered on time and 95% of submitted briefings are error-free
  • Plans daily activities within the guidelines of company policy, job description, and supervisor’s instruction to maximize personal output
  • Responsible for aiding in own self-development by being available and receptive to all training made available by the company
What we offer
What we offer
  • Medical
  • Dental
  • Vision
  • Company Life Insurance
  • Short-Term and Long-Term Disability Insurance
  • 401(K) Immediate Vesting
  • Professional Development Assistance
  • Legal Aid Assistance Program
  • Family Planning / Fertility Assistance
  • Personal Time Off
  • Fulltime
Read More
Arrow Right

Senior Security Engineer

Truveta is the world’s first health provider led data platform with a vision of ...
Location
Location
United States , Seattle
Salary
Salary:
135000.00 - 180000.00 USD / Year
truveta.com Logo
Truveta
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Cyber Security, Computer Science, Information Security, Information Systems, or a related field, or equivalent practical experience
  • 5+ years of experience in Security Operations (SOC), Incident Response, or Detection & Response role, with demonstrated ownership of complex security incidents
  • Hands-on experience with Microsoft Sentinel (SIEM) and Microsoft Defender XDR (Defender for Endpoint, Identity, Office 365, Cloud Apps)
  • Proficiency in KQL (Kusto Query Language) for investigations, threat hunting, and detection engineering
  • Experience designing, tuning, and maintaining SIEM detections and SOAR automation, including alert triage and response workflows
  • Solid understanding of Azure cloud architecture, core services, and native security controls
  • Familiarity with Azure Entra ID, identity security concepts, RBAC, and IAM-related threats
  • Experience with handing high-severity security incidents, including cross-team coordination and stakeholder communication
  • Familiarity with MITRE ATT&CK, threat actor techniques, and modern attack methodologies across cloud, identity, and endpoint environments
  • Experience supporting on-call rotations and working in a 24/7 or follow-the-sun SOC environment
Job Responsibility
Job Responsibility
  • Incident Response: Handle investigation and response to security incidents across endpoints, identities, email, cloud workloads, and SaaS applications
  • Act as a senior escalation point for SOC analysts during complex or ambiguous security events
  • Participate in on-call rotations and provide senior-level escalation support when needed
  • Lead or contribute to post-incident reviews (RCA, postmortems) and track remediation actions to completion
  • Ensure incidents are accurately documented for audit, compliance, and operational learning
  • Maintain and improve incident response runbooks, playbooks, and escalation procedures
  • Support incident readiness activities, including tabletop exercises and response drills
  • Detection Engineering & Automation: Develop, tune, and maintain Microsoft Sentinel analytics rules to improve detection quality and reduce false positives
  • Design and optimize KQL queries for investigations, threat hunting, and detection engineering
  • Integrate and maintain log sources and data connectors in Microsoft Sentinel, ensuring data quality and proper normalization
What we offer
What we offer
  • Interesting and meaningful work for every career stage
  • Great benefits package
  • Comprehensive benefits with strong medical, dental and vision insurance plans
  • 401K plan
  • Professional development & training opportunities for continuous learning
  • Work/life autonomy via flexible work hours and flexible paid time off
  • Generous parental leave
  • Regular team activities (virtual and in-person)
  • Fulltime
Read More
Arrow Right

Enterprise Resource Planning Senior Analyst

The Enterprise Resource Planning Senior Analyst will lead Pega projects, focusin...
Location
Location
India , Pune
Salary
Salary:
Not provided
nttdata.com Logo
NTT DATA
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of experience with developing mobile applications using Pega
  • 2+ years of experience with developing Pega applications using Constellation
  • Certified in Decisioning Capabilities from Pega (CPDC Certification)
  • Master / Bachelor’s degree in computer science, computer engineering or related field
  • Ability to successfully run end-to-end delivery of Pega PRPC based solutions / projects from technical perspective
  • Need to possess excellent skills to Identify and drive process optimization and process streamlining for client Business processes
  • Excellent knowledge and experience on Pega PRPC Enterprise class structure design and application profiling
  • Strong knowledge on various Pega PRPC concepts and rule types like Activities, Functions, Data Transforms, Authentication Service, Reporting, Agents and Ruleset Management
  • Experience with multi-language and localization of application interfaces
  • Experience with the UI framework and creating skins
Job Responsibility
Job Responsibility
  • Design and integration strategy for a Pega Application implementation, in alignment with transformational initiatives
  • Formulate the overall data strategy for the business solution, based on the client’s business needs and enterprise strategy
  • Provide guidance and act as the subject matter expert for CSA’s
  • Drive and instill best practices and concepts as a thought leader for Pega methodology
  • Maintain knowledge of current and emerging technologies / products / trends related to solutions
  • Ensure alignment of solutions with business and IT goals / objectives
  • Identify and quantify scope and impact of Business requirements and changes on systems
  • Communicate solution options to business owners/stakeholders
  • Incorporate software and system architecture (e.g. infrastructure, network) into conceptual designs for highly scalable and performing solutions
  • Ensure alignment with enterprise technology standards (e.g. solution patterns, application frameworks, technology roadmaps, capital plans)
  • Fulltime
Read More
Arrow Right