AI-Driven Threat & Exposure Platform Architect

Citibank (Switzerland) AG; Irving (TX); Hybrid; USD 156,000 - 234,000; Full time

Job summary

Citibank (Switzerland) AG seeks an experienced Threat & Exposure Management Platform Engineer to design and operate a unified security data platform in Irving, TX. You will own data pipelines, correlation logic, and API integrations that enrich risk visibility across the enterprise.

You will collaborate with security operations, threat intel, and engineering teams to scale the platform, improve exposure discovery, and enable automated risk prioritization and response.

Qualifications

• Strong architecture skills spanning end-to-end platform architectures.
• Hands-on experience building large-scale data pipelines (Kafka, Spark, Airflow, Flink).
• API design and development (REST/GraphQL) with authentication and versioning.
• Experience integrating heterogeneous security platforms (Vulnerability mgmt, EDR/XDR, CSPM, SIEM, CMDB).
• Proficiency with cloud-native data infrastructure (AWS/Azure/GCP).
• Programming in Python, Go, or Java.
• Familiarity with risk scoring frameworks and exposure concepts.

Responsibilities

• Data Pipeline Engineering: design, build, operate scalable data pipelines ingesting threat signals.
• Platform Integration: maintain API integrations to create a unified threat/exposure view.
• Correlation Engine Development: implement data models linking assets, vulnerabilities, and threats.
• Data Substrate Ownership: own schemas, storage layers, and streaming infrastructure.
• API & Interface Development: expose secure APIs for dashboards and tooling.
• Automation & Scale: automate onboarding of new tools and data sources.

Skills

Architecture

Platform engineering

Data pipelines

API design

Data modeling

Programming (Python/Go/Java)

Cloud data infra

Security concepts

Education

Bachelor’s degree

Tools

Kafka

Spark

Airflow

Flink

REST/GraphQL

Job description

Citibank (Switzerland) AG seeks an experienced Threat & Exposure Management Platform Engineer to design and operate a unified security data platform in Irving, TX. You will own data pipelines, correlation logic, and API integrations that enrich risk visibility across the enterprise.

You will collaborate with security operations, threat intel, and engineering teams to scale the platform, improve exposure discovery, and enable automated risk prioritization and response.