Insider Threat Cyber Senior Analyst, Citi

Citi

Location:
Hungary, Budapest

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

The Insider Threat Cyber Senior Analyst is responsible for driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

Job Responsibility:

monitor, research, assess and analyze alerts from various security tools
design queries, visualizations, use cases and reports leveraging Splunk
recommend and review new use cases for insider threat monitoring
support the development and enhancement of SOC incident response capabilities
follow pre-defined actions to investigate possible security incidents or perform incident response actions
execute daily ad hoc tasks or lead projects as needed
participate in or lead daily and ad-hoc conference calls
create, update or provide process documentation
provide requested evidence for compliance & controls requests

Requirements:

6-10 years of relevant experience
bachelor’s degree or higher (Computer Science or Cyber security preferred) or equivalent work experience
fluency in English
significant experience using Splunk Enterprise to create queries, visualizations, and other reporting functions to identify anomalous activity
excellent knowledge and previous experience with insider threat investigations, network security, TCP/IP, various operating systems (Windows/UNIX), and web technologies (focusing on Internet security)
ability to read and understand packet level data
experience with intrusion detection and prevention systems, network security products (IDS/IPS, firewalls, etc) and host security products (HIPS, AV, EDR, etc)
advanced proficiency with Microsoft Office tools and software
very good analytical skills

Nice to have:

experience with ArcSight, Arbor PeakFlow, Palo Alto Networks
familiarity with IDPS tools, SIEM, anomaly detection systems, firewalls, antivirus systems, user behavior analytics tools, endpoint inspection, and proxy devices

What we offer:

cafeteria program
home office allowance (for colleagues working in hybrid work models)
paid parental leave program (maternity and paternity leave)
private medical care program and onsite medical rooms at offices
pension plan contribution to voluntary pension fund
group life insurance
employee assistance program
access to learning and development programs, online course libraries and upskilling platforms
flexible work arrangements
career progression opportunities
socially active employee communities with diverse networking opportunities

Additional Information:

Job Posted:
July 02, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Insider Threat Cyber Senior Analyst