Senior Intelligence Lead: Cyber OSINT & Advanced Analytics

Citi; Charlotte (NC); On-site; USD 117,000 - 176,000; Full time

Job summary

Citi’s CSIS program seeks an Intelligence Lead Analyst to own collection and analysis of IoCs and TTPs, maintaining link analysis frameworks while building automated data collection tools. This senior role focuses on OSINT and automation, with collaboration across security, engineering, and investigations across Citi.

Ideal candidates bring strong OSINT tradecraft, threat intelligence ops experience, and the ability to deliver high‑quality analyses for technical and executive audiences.

Qualifications

• 6–10 years of relevant experience.
• Working knowledge of APT, third‑party risks/threats, cybercrime, cyber terror/terrorists, fraud, malware, mobile threats.
• Operationalizing cyber threat intelligence into detections, hunt packages, and risk reporting.
• Clear and concise written and verbal communication.
• Proven influencing and relationship management skills.
• Strong analytical abilities.

Responsibilities

• Fulfill cyber OSINT requests using advanced analysis tools to surface timely, actionable intelligence.
• Anticipate gaps and develop innovative OSINT solutions with internal and external stakeholders.
• Design, develop, and maintain in‑house solutions for collecting, processing, and analyzing open source data.
• Automate intelligence collection leveraging link analysis frameworks and evaluate providers.
• Triages and analyzes intelligence alerts, reports, and briefings with disciplinary knowledge.
• Liaise with developers, intelligence communities, law enforcement, partners, and information sharing communities.
• Manage multiple projects with proactive, self‑motivated delivery and global collaboration.
• Complete daily operational components of intelligence missions.
• Mentor team members and assist with coaching and training.

Skills

MITRE ATT&CK framework

Threat intel platforms

Python

PowerShell

Bash

OSINT tradecraft

Link analysis tools

Network forensics

Malware analysis

Communication skills

Influencing & relationships

Analytical skills

Education

Bachelor’s degree / University degree or equivalent experience

Masters degree preferred

CREST CCTIM

Recorded Future Certified Analyst

CISSP

CEH

OSCP

Tools

Palantir

Maltego

i2 Analyst's Notebook

Recorded Future

Mandiant Advantage

ThreatConnect

MISP

OpenCTI

Python

Job description

Citi’s CSIS program seeks an Intelligence Lead Analyst to own collection and analysis of IoCs and TTPs, maintaining link analysis frameworks while building automated data collection tools. This senior role focuses on OSINT and automation, with collaboration across security, engineering, and investigations across Citi.

Ideal candidates bring strong OSINT tradecraft, threat intelligence ops experience, and the ability to deliver high‑quality analyses for technical and executive audiences.