VP SOC Fraud Analytics & Incident Response

Citibank (Switzerland) AG; Irving (TX); Hybrid; USD 126,000 - 189,000; Full time

Job summary

Citibank (Switzerland) AG in Irving, TX is seeking a VP SOC Cyber Fraud Analyst – Level 2 (L2) to monitor, triage, and analyze security events across endpoints, networks, email, and data. You will lead L1 analysts, mentor junior staff, and drive use-case development and incident response improvements.

The role requires 6–10 years in cyber-fraud analysis or data analytics, strong SQL/Python skills, and experience with big data and WAF/Bot defenses. Hybrid work model.

Qualifications

• 6–10 years of experience in cyber-fraud analysis, incident response, or data analytics.
• Advanced knowledge of cyber-enabled fraud TTPs and incident response lifecycle.
• Experience with data analytics tools and large datasets.

Responsibilities

• Perform 24x7 monitoring and triage of security alerts across multiple domains.
• Lead Level 2 review, mentorship, and education for L1 analysts.
• Coordinate rapid response and containment of active fraud incidents.
• Document actions and findings for escalation-ready records.
• Design and implement advanced SOC playbooks and SOPs.

Skills

Data analytics

SQL

Python

SAS/R

Education

Bachelor's degree in Data Science / CS

Tools

Hadoop

Spark

Tableau/Power BI

WAF/Bot Defense Tools

Job description

Citibank (Switzerland) AG in Irving, TX is seeking a VP SOC Cyber Fraud Analyst – Level 2 (L2) to monitor, triage, and analyze security events across endpoints, networks, email, and data. You will lead L1 analysts, mentor junior staff, and drive use-case development and incident response improvements.

The role requires 6–10 years in cyber-fraud analysis or data analytics, strong SQL/Python skills, and experience with big data and WAF/Bot defenses. Hybrid work model.