Senior OSINT & Threat Automation Lead

Citi; Charlotte (NC); On-site; USD 117,000 - 176,000; Full time

Job summary

Citi is seeking a senior Intelligence Lead Analyst in Charlotte, NC to own and enhance link analysis frameworks and build in-house tools that automate intelligence collection at scale. You will shape how Citi identifies, pursues, and neutralizes threats across a leading financial institution.

This role blends cyber OSINT mastery with software development, requiring collaboration with developers and investigators to implement advanced analytics and automation across global teams.

Qualifications

• 6-10 years of relevant experience.
• Working knowledge in APT, Third Party Risks/Threats, Cybercrime, Extremist Groups and Cyber Terrorists, Hacktivism, DDoS, Fraud, Malware, Mobile Threats.
• Proven track record of operationalizing cyber threat intelligence—translating raw intelligence into detections, hunt packages, and risk-relevant reporting.
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills

Responsibilities

• Fulfill cyber OSINT requests by applying advanced analysis tools and techniques to surface timely, actionable intelligence.
• Proactively anticipate gaps in our intelligence posture and develop innovative solutions, collaborating with internal and external stakeholders on open-source methodologies and tooling.
• Design (develop), implement, and maintain in-house solutions for collecting, processing, and analyzing open source data.
• Automate intelligence collection capabilities, leveraging existing link analysis frameworks and evaluating alternative providers.
• Apply in-depth disciplinary knowledge to triage, process, and analyze intelligence alerts, reports, and briefings.
• Engage in liaison activities with developers, intelligence communities, law enforcement, industry partners, peer financial institutions, and information sharing communities.
• Manage multiple projects with a proactive, self-motivated approach and timely delivery with global teams.
• Complete the daily operational components of the intelligence mission.

Skills

MITRE ATT&CK

Threat Intelligence Platforms

Python

PowerShell

Bash

OSINT

Palantir

Maltego

i2 Analyst's Notebook

Network Forensics

Malware Analysis

Communication

Influencing/Relationship mgmt

Education

Bachelor’s degree

Master’s degree preferred

CREST CCTIM, RFCA, CISSP, CEH, OSCP certifications

Tools

Recorded Future

Mandiant Advantage

ThreatConnect

MISP

OpenCTI

Palantir

Maltego

i2 Analyst's Notebook

Job description

Citi is seeking a senior Intelligence Lead Analyst in Charlotte, NC to own and enhance link analysis frameworks and build in-house tools that automate intelligence collection at scale. You will shape how Citi identifies, pursues, and neutralizes threats across a leading financial institution.

This role blends cyber OSINT mastery with software development, requiring collaboration with developers and investigators to implement advanced analytics and automation across global teams.