Cloud Security Threat Modeler Senior Analyst (AVP) - Citi

Discover your future at Citi Working at Citi is far more than just a job. A career with us means joining a team of more than 230,000 dedicated people from around the globe. At Citi, you\’ll have the opportunity to grow your career, give back to your community and make a real impact. Job Overview Engineer the future of global finance. At Citi, our Tech team doesn\’t just support finance – we are helping to redefine it. Every day, $5 trillion crosses through our network. We do business in 180+ countries operating at a scale few can match. From deploying advanced AI to helping shape global markets, we build systems that matter. Look to join a team where your work helps influence economies, your ideas can drive innovation and outcomes, and your growth is backed by mentorship, continuous learning and flexibility with potential hybrid work opportunities. Help solve real-world challenges that touch millions and get the opportunity to build the future of finance with Citi Tech. Overview of Chief Information Security Office (CISO): The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi\’s clients\’, our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions. Overview of the Role: Citi is looking for a security focused person with a good understanding of cybersecurity principles to work in the Cloud Threat Modeling team. Using threat modeling you will identify threats and specify mitigating controls which will directly reduce the risk of Citi operating in the public cloud. Responsibilities: Perform Threat Modeling using a documented process Development of automation tools as required Maintain a high standard of work in identifying threats and specifying mitigating controls Attending to the lifecycle of identified threats and controls Delivery of threat models and supporting tasks within existing timeframes Provide feedback, support, and improvements to the existing threat modeling process Present work to seniors, the team, and other technical teams Qualifications: Extensive experience in a Cybersecurity role. Proven experience with Jira or other similar ticketing systems. Strong understanding of security best practices related to Authentication , A uthorization , L ogging/Monitoring , Encryption , Infrastructure Security , and Network Segmentation . Experience with scripting languages (e.g., Python , Bash , PowerShell ) or Infrastructure as Code tools (e.g., Terraform , CloudFormation ). Familiarity with threat modeling methodologies like STRIDE , PASTA , Attack Trees , and the MITRE ATT