This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Join Citi's Chief Information Security Office (CISO) as a SOC Cloud Analyst (Info Security Tech Sr Analyst - C12) and play a central role in protecting one of the world's most complex financial institutions from evolving cyber threats. Sitting within a globally integrated security function, you will monitor, detect, and respond to security incidents across major cloud environments (AWS, MS Azure, and Google Cloud) ensuring Citi's data, clients, and operations remain secure. This is an opportunity to make a measurable impact within a team that manages information security as a single, end-to-end program with clear accountability and a mandate aligned to modern security frameworks.
Job Responsibility
Monitor security events and alerts across cloud environments — including AWS, MS Azure, and Google Cloud — using dedicated security monitoring tools to detect threats in real time
Lead and support investigations into cloud security incidents, coordinating with incident response teams to assess technical risk and drive timely resolution
Assess the threat landscape on a regular basis, identifying emerging risks and ensuring controls remain effective as conditions evolve
Identify vulnerabilities in cloud systems and infrastructure, working with senior security colleagues to prioritize and address findings
Collaborate with system development and infrastructure teams to embed security controls throughout the development lifecycle, including authentication and encryption practices
Prepare security reports and documentation to support audits, compliance reviews, and internal governance requirements
Develop and maintain technical security procedures and process documentation, ensuring guidance is current, clear, and actionable
Mentor and support junior team members, sharing knowledge and contributing to a culture of continuous learning within the security function
Requirements
5+ years of experience in information security, cloud security, or a closely related discipline
Hands-on experience monitoring and responding to security events in cloud environments such as AWS, MS Azure, or Google Cloud
Ability to communicate security findings and risk assessments clearly and concisely, both in writing and verbally, to technical and non-technical audiences
Demonstrated ability to build effective working relationships and influence outcomes across cross-functional teams
Strong analytical capability, with the ability to assess complex security scenarios and translate findings into clear, actionable recommendations
Bachelor's degree or equivalent professional experience
Nice to have
Familiarity with cloud security best practices, frameworks, or certifications (e.g., AWS Security Specialty, Microsoft SC-200, or equivalent)
Experience supporting vulnerability assessments or ethical hacking programs within cloud or hybrid environments
Exposure to security tooling used in a Security Operations Centre (SOC) context, such as SIEM platforms or cloud-native security services
Experience contributing to audit preparation or compliance documentation within a regulated financial services environment
What we offer
Medical, dental & vision coverage
401(k)
Life, accident, and disability insurance
Wellness programs
Paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays
Hybrid working model — 3 days in the office and 2 days working remotely
Access to ongoing training and professional development in cloud security and cybersecurity
The opportunity to work within a globally integrated security program
A culture that values merit, inclusion, and authenticity
Meaningful work that directly contributes to the safety of Citi's clients, employees, and data
Competitive benefits and financial wellbeing support