Intelligence Senior Analyst

Citigroup Inc.; Tampa (FL); On-site; USD 87,000 - 131,000; Full time

Job summary

Citigroup Inc. in Tampa, Florida is seeking an Executive Open Source Intelligence Senior Analyst embedded with the Fraud Fusion Center to lead OSINT collection, threat hunting, and high‑level analysis for complex investigations and cyber-enabled fraud monitoring.

The role requires advanced open-source analysis, strong project management, and the ability to deliver concise written findings and oral briefings to Citi stakeholders. A bachelor’s degree is required; Master’s degrees are a plus.

Qualifications

• Minimum bachelor’s degree (or equivalent experience).
• Master’s or other post graduate degrees welcomed.
• Thorough understanding of attack vectors and fraud TTPs; advanced knowledge of financial payment networks and processes; significant hands-on experience with dark web threat intelligence.
• Demonstrated ability to collect, evaluate, interpret, and analyze data with strong analytical methods.
• Excellent written and oral communication with attention to detail.
• Established project management skills and the ability to coordinate multiple projects globally.

Responsibilities

• Lead open source intelligence analysis and threat hunting for the Fraud Fusion Center using approved tradecraft and resources.
• Apply advanced techniques to monitor threats and collect data from open sources including social media, deep and dark web.
• Foster development of the cyber-enabled fraud monitoring program and manage collection capabilities for the OSINT team.
• Turn information into actionable intelligence using link and footprint analysis.
• Identify intelligence gaps and collaborate with stakeholders to close them.

Skills

Open source analysis

Threat hunting

Data collection

Written & verbal communication

Project management

Mentorship

Dark web intelligence

Microsoft Office

Education

Bachelor's degree (or equivalent)

Master’s degree welcomed

Tools

Palantir

Semantica Pro

Maltego

i2 Analyst’s Notebook

ESRI

Microsoft Office

Job description

Program description

The CSIS Open Source Intelligence (OSINT) program provides advanced and customized analysis for complex or sensitive investigations, cyber matters, and high-risk security and fraud events, as well as cyber-enabled fraud monitoring and analysis by delivering timely and actionable intelligence to Citi stakeholders through collection and analysis using both open and internal data sources. Based in Tampa, Florida, this position is embedded with Citi’s Fraud Fusion Center (FFC). The FFC utilizes and depends on a strong “Team of Teams” approach, partnering with key teams of subject matter experts to combine intelligence, analysis, mitigation, and investigation into a holistic approach to fraud management of cyber-enabled financial crimes and threats.

Job description

The Open Source Intelligence Senior Analyst position requires a high level of expertise in open source collection and analysis, as well as project management. The Senior Intelligence Analyst is a seasoned professional who applies in-depth disciplinary knowledge, contributing to the development of new techniques and the improvement of processes and workflows for the area or function.

Role responsibilities

• Lead open source intelligence analysis and threat hunting for the Fraud Fusion Center, using approved tradecraft and advanced intelligence resources.
• Apply advanced techniques to monitor threats and collect data from multiple open sources, including social media, the deep and the dark web.
• Foster the development of the cyber-enabled fraud monitoring program and manage intelligence collection capabilities for the FFC OSINT team.
• Apply advanced qualitative and quantitative analytical methodologies to turn information and data into actionable intelligence, including but not limited to link analysis and digital footprint analysis.
• Anticipate, identify and develop innovative solutions to intelligence gaps. Partner with internal and external stakeholders on open source methodologies and tools where appropriate to close identified gaps.
• Deliver analysis and findings in the form of high quality, succinct, and straightforward written products and oral briefings.
• Manage multiple projects simultaneously with a proactive, self-motivated approach, ensuring timely delivery of high-quality results while collaborating effectively with global teams.

Qualifications and skills

• Minimum bachelor’s degree (or equivalent experience) required. Master’s or other post graduate degrees welcomed.
• Thorough understanding of attack vectors and fraud TTPs; advanced knowledge of financial payment networks and processes; significant hands-on experience with dark web threat intelligence.
• Demonstrable ability to collect, evaluate, interpret, and analyze data, with a strong knowledge of analytical techniques. Strong analytical skills to filter, prioritize and validate potentially complex and dynamic material from multiple sources.
• Excellent communication (oral and written) skills with attention to detail.
• Established project management skills – ability to coordinate and prioritize several projects simultaneously while working with a globally dispersed team of contributors and stakeholders. Taking ownership of projects and making suggestions for improvement. Proactively identifying, communicating, and resolving project issues and risks that interfere with project execution.
• Self-motivation, ability, and maturity to make decisions in the absence of detailed instructions and to operate in a fast paced and dynamic setting.
• Ability to act as a mentor to less-tenured staff and use effective communication skills to influence others.
• Experience in utilizing analytical and visualization software applications – specifically link analysis tools (e.g., Palantir, Semantica Pro, Maltego, i2 Analyst’s Notebook, ESRI) – a plus.
• Expertise in Microsoft Office products, and demonstrable creativity in the use of these to solve analytical problems.
• Fluent English language skills (written and oral) required. Additional languages preferred.
• Certifications from ACFE, EC-Council, SANS Institute, IntelTechniques, or graduate certification(s) in relevant technical or specialty areas a plus.

Work experience

• Minimum of 5 years’ experience relating to open source intelligence analysis for investigations, threat monitoring, or intelligence targeting.
• Previous analytical experience within corporate investigations, the intelligence community or law enforcement preferred.
• Experience in cyber-enabled fraud monitoring and analyzing card fraud methodologies preferred.
• Proven record of accomplishment in information gathering, monitoring, and analysis pertaining to matters in various geographical locations, including strong use of commercial databases, surface, deep and dark web, and social media.
• Experience in managing variable and complex projects simultaneously and executing daily duties with minimal supervision.
• Extensive background in problem-solving and the implementation of custom technical solutions.
• Demonstrated examples of process development and implementation to improve effectiveness and efficiencies.

Job Family Group:

Technology

Job Family:

Information Security

Time Type:

Full time

Primary Location:

Tampa Florida United States

Primary Location Full Time Salary Range:

$87,280.00 - $130,920.00

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

Most Relevant Skills

Please see the requirements listed above.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Automated Processing and AI

We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.

Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision‑making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

AI Notice and Right

Illinois residents – AI Notice and Right

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi. View Citi’s EEO Policy Statement and the Know Your Rights poster.