CSIS Intelligence Lead Analyst, Advanced Analytics and Cyber OSINT

Citi

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Charlotte, NCTampa, FL
Salary
$117,440–$176,160 / yr
Employment
Full-time
Posted
62 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $150k
This role $147k
$99k $200k
below market most similar roles pay here above market

This role pays less than 53% of similar roles. Most pay $122,275–$177,800 — the blue band above. At the midpoint, this role pays about $147k versus about $150k for comparable roles.

Based on 240 similar postings.

Employer

About Citi

Citi is one of the world’s most trusted financial institutions, proudly serving millions of customers across the United States.

Citi currently has 268 open roles on FindRole.

Listed pay typically runs $125,760–$188,640 across 251 roles with salary data.

Most-posted roles

View all roles at Citi

At a glance

TL;DR · CSIS Intelligence Lead Analyst, Advanced Analytics and Cyber OSINT

The CSIS Intelligence Lead Analyst - Advanced Analytics and Cyber OSINT joins the CSIS Advanced Analytics and Cyber OSINT program. In this senior-level role, you will maintain link analysis frameworks and engineer in-house solutions to automate intelligence collection at scale. You will fulfill cyber OSINT requests, triage intelligence alerts, and develop custom tools for collecting, processing, and analyzing open-source data to support financial crime investigations and cyber-enabled fraud matters. Required skills include proficiency in the MITRE ATT&CK framework, scripting with Python, PowerShell, and Bash, and using platforms like Recorded Future, Mandiant Advantage, and Palantir. You must demonstrate advanced OSINT tradecraft, including dark web monitoring and infrastructure pivoting, while translating raw intelligence into detections and risk-relevant reporting to neutralize threats across the financial institution.

What you'll do

  • Fulfill cyber OSINT requests by applying advanced analysis tools and techniques to surface actionable intelligence.
  • Design, implement, and maintain in-house software solutions for collecting and processing open-source data.
  • Automate intelligence collection capabilities by leveraging and enhancing existing link analysis frameworks.
  • Triage, process, and analyze intelligence alerts, reports, and briefings using in-depth disciplinary knowledge.
  • Map adversary TTPs to the MITRE ATT&CK framework to build hunt hypotheses and drive detection coverage.
  • Develop custom extractors, web scrapers, and automation workflows using Python, PowerShell, or Bash.
  • Produce clear and concise intelligence products for both technical and executive audiences.
  • Mentor and coach new team members on intelligence methodologies and technical tools.

What we're looking for

  • 6-10 years of relevant experience.
  • Bachelor’s degree or equivalent experience.
  • Master’s degree in Computer Science, Cybersecurity, Information Security, or a related STEM discipline (preferred).
  • CREST CCTIM, Recorded Future Certified Analyst, CISSP, CEH, or OSCP certifications (preferred).
  • Proficiency in the MITRE ATT&CK framework for mapping adversary TTPs and building hunt hypotheses.
  • Hands-on experience with Threat Intelligence Platforms such as Recorded Future, Mandiant Advantage, ThreatConnect, MISP, or OpenCTI.
  • Experience with scripting and automation languages including Python, PowerShell, and Bash for intelligence collection and enrichment.
  • Advanced OSINT tradecraft including dark web monitoring, social media intelligence, infrastructure pivoting, and digital footprint analysis.

More like this

Similar roles

Intelligence Lead Analyst

Citi

Tampa, FL +2 26 days ago $113,840–$170,760
Data Analytics Intelligence Cycle Investigative Intelligence Information Security Counterintelligence Post-Investigation Analysis
6+ yrs exp Hybrid

Lead Cyber Intelligence Analyst

McKesson Corporation

Irving, TX 20 days ago $151,600–$252,600
Cyber Threat Intelligence MITRE ATT&CK SIEM EDR NDR OSINT Virus Total Censys Grey Noise Domain Tools Scripting Automation AI Cyber Kill Chain
10+ yrs exp Hybrid

Cyber Intelligence Analyst

Booz Allen Hamilton

Washington, DC 62 days ago $86,800–$198,000
Cyber Threat Intelligence All-Source Intelligence Structured Analytic Techniques ICD 203 Industrial Control Systems Advanced Persistent Threats Cyber Defense Strategic Intelligence Assessments
4+ yrs exp

Cyber Intelligence Analyst

Booz Allen Hamilton

Lakewood, CO 68 days ago
Cyber Intelligence Industrial Control Systems Operational Technology Structured Analytic Techniques IC Tradecraft ICD 203 All-Source Intelligence
8+ yrs exp

Cyber Intelligence Analyst

Booz Allen Hamilton

Columbia, MD 45 days ago
Cyber Threat Intelligence Cyber Operations Python SQL Regex SIGINT Data Analytics Data Visualization Microsoft Office Suite M2M IoT Network Protocols DX XKEYSCORE DevNav
4+ yrs exp

Cyber Threat Intelligence Analyst

Booz Allen Hamilton

Huntsville, AL 48 days ago
Splunk Sentinel Python SQL PHP C++ Perl Java CrowdStrike Mandiant VirusTotal Shodan QRadar ArcSight Defender SIEM Digital Forensics Penetration Testing Network Protocols
5+ yrs exp