Cloud Security Specialist

7 days ago


New York, New York, United States 00002 Citibank, N.A. Full time

About Citi:

Citi, a leading global bank, serves over 200 million customers across 160 countries and jurisdictions. We provide a wide range of financial products and services to consumers, corporations, governments, and institutions, including consumer banking, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients' best interests. Our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all.

The Team:

The team works on ensuring Citi's cloud posture is within risk tolerance levels. The work spans the three major cloud service providers (AWS, GCP, Azure/M365). The day-to-day work includes Ethical Hacking/Purple Team activities, Security Automation, SME guidance on recommended improvements to security posture, and metrics delivery to senior leaders. Candidates should have knowledge of the tools and processes to provide operational security support to our cloud ecosystem.

The Role:

The Cloud Security Operations team works in a multi-disciplinary team of teams driving cyber security services and solutions to enable Citi to securely adopt private, hybrid, and public cloud platforms. This role is one of the primary security interfaces with development teams, architects, engineers, and operational teams involved in cloud-related projects. Our operating model emphasizes DevSecOps, that is, automation, integration, and agility based on Security as a Service / Security as Code concepts.

Responsibilities:

  • Perform full end-to-end security assurance activities in Azure/O365/M365, including Vulnerability Assessments (preproduction, post-production), Purple Team exercises (Red and Blue team collaboration) to identify areas of risk and ensure any gaps are documented and remediated.
  • Provide threat modeling and risk assessment services to characterize the risk and severity posture of various systems and components in the cloud environment.
  • Partner with Engineering and Operations teams to create, implement, and apply DevSecOps practices and processes that are consumed by developers across all sectors in Citi.

Qualifications:

Candidates should have 3-5+ years of experience in most of the following areas:

  • Hands-on experience with Cloud platforms, specifically Azure/M365.
  • Excellent understanding of cloud security concepts/best practices in various cloud Service Providers (for example: Azure/M365).
  • Offensive Security-oriented mindset (threat-modeling, vulnerability assessments, penetration testing, etc.).
  • Familiarity with the current threat landscape which Microsoft Cloud exists in. Understanding of recent breaches, APTs, and common TTPs used to attack these platforms.
  • Deep understanding of Entra ID: its features, risks, common misconfigurations, and how it integrates with M365 and Azure.
  • Familiarity with securing containers and container orchestration frameworks (such as Kubernetes).
  • Understanding of MITRE ATT&CK.
  • Programming/scripting language experience is a big plus (Python and PowerShell preferred but not required).
  • Ability to deliver presentations to technical and non-technical individuals.

Education:

  • Bachelor's Degree or equivalent working experience.
  • Candidates must possess or be open to pursuing one or more of the following industry-accredited certifications within the 1st year of employment:

Cloud security certifications: Azure Security Engineer Associate, Microsoft 365 Certified Security Administrator Associate, AWS Security Specialty, GCP Professional Cloud Security Engineer, etc.

Container/Kubernetes certifications: CKA, CKAD, CKS, etc.

Other security certifications: OSCP, OSCE, GXPN, GPEN, GCIH, GWAPT, etc.

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.



  • New York, New York, United States 00002 Citibank, N.A. Full time

    About CitiCiti is a leading global bank with a presence in over 160 countries and jurisdictions. We provide a wide range of financial products and services to consumers, corporations, governments, and institutions.The RoleWe are seeking a highly skilled Cloud Security Operations Specialist to join our team. As a key member of our Cloud Security Operations...


  • New York, New York, United States Photon Full time

    Cloud Security Specialist Position at PhotonOverview:Photon is seeking a skilled Cloud Security Specialist with expertise in Go or Kotlin programming languages, focusing on identity and access management. In this role, you will be responsible for designing, implementing, and managing cloud security solutions across our organization. You will work closely...


  • New York, New York, United States 00002 Citibank, N.A. Full time

    About 00002 Citibank, N.A.00002 Citibank, N.A., a leading global financial institution, serves over 200 million customers worldwide, operating in more than 160 countries and jurisdictions. As a bank with a strong commitment to innovation and customer satisfaction, we provide a wide range of financial products and services, including consumer banking,...


  • New York, New York, United States A-Line Staffing Solutions Full time

    Job Title: Oracle HCM Cloud Security SpecialistWe are seeking a skilled Oracle HCM Cloud Security Specialist to enhance our organization's security posture. As a key member of our team, you will be responsible for ensuring the confidentiality, integrity, and availability of our HCM cloud-based systems.Key Responsibilities:Implement and maintain robust...


  • New York, New York, United States LS Technologies, LLC Full time

    Position OverviewLS Technologies, a Tetra Tech company, is seeking a skilled Cloud Infrastructure Security Specialist to assist in transforming the National Airspace System (NAS) through server consolidation and virtualization, focusing on Cloud and Hybrid solutions, as well as security protocols and operational procedures.Key ResponsibilitiesContribute...


  • New York, New York, United States Amazon Web Services, Inc. Full time

    About the RoleWe are seeking a highly skilled Cloud Security Solutions Architect to join our team at Amazon Web Services, Inc. as a GTM Specialist Solutions Architect. As a member of our Core Services team, you will play a key role in helping customers secure their cloud environments by recommending the most suitable AWS security services and...


  • New York, New York, United States 00002 Citibank, N.A. Full time

    About Citi:Citi, a leading global bank, serves over 200 million customers across 160 countries. Our Enterprise Operations & Technology teams drive innovation, ensuring secure, reliable, and efficient services. We foster a diverse and inclusive work environment, promoting growth and development opportunities for all employees.The Team:The Cloud Security...


  • New York, New York, United States Amazon Web Services, Inc. Full time

    About the RoleWe are seeking a highly skilled Cloud Security Solutions Architect to join our team at Amazon Web Services, Inc. As a key member of our Worldwide Specialist Organization (WWSO) Core Services team, you will play a critical role in helping customers secure their cloud estates by providing expertise across the entire life cycle of an AWS customer...


  • New York, New York, United States Bowman Williams Full time

    About the RoleWe are seeking a highly skilled Cloud Infrastructure Specialist to join our team at Bowman Williams. As a Cloud Infrastructure Specialist, you will play a critical role in the success of our clients by providing expert-level support for their cloud infrastructure needs.Key ResponsibilitiesDesign, implement, and manage cloud infrastructure...


  • New York, New York, United States Amazon Web Services, Inc. Full time

    About the RoleWe are seeking a highly skilled Cloud Security Solutions Architect to join our team at Amazon Web Services, Inc. As a key member of our Worldwide Specialist Organization (WWSO) Core Services team, you will play a critical role in helping our customers secure their cloud estates by providing expertise across the entire life cycle of an AWS...


  • New York, New York, United States Amazon Web Services, Inc. Full time

    About the RoleWe are seeking a highly skilled Cloud Security Solutions Architect to join our team at Amazon Web Services, Inc. As a Cloud Security Solutions Architect, you will be responsible for designing and implementing secure cloud solutions for our customers.Key ResponsibilitiesRepresent the voice of our customers and collaborate with field and central...


  • New York, New York, United States Amazon Web Services, Inc. Full time

    About the RoleWe are seeking a highly skilled Cloud Security Solutions Architect to join our team at Amazon Web Services, Inc. As a key member of our Global Financial Services team, you will be responsible for creating scaled GTM motions for AWS security services to expand adoption of these services into the largest Financial Services companies.Key...


  • New York, New York, United States Fidelity Information Services Full time

    About the RoleWe are seeking a highly skilled Cloud Security Analyst to join our team at Fidelity Information Services. As a Cloud Security Analyst, you will be responsible for analyzing and monitoring the hybrid public cloud environment across our FIS environment.Key ResponsibilitiesAdminister and implement security measures for hybrid public cloud...


  • New York, New York, United States Transfinder Full time

    The Cloud Infrastructure Specialist at Transfinder plays a crucial role in ensuring the reliability and scalability of our cloud-based software solutions. This position collaborates closely with the Development and Operations teams to design, implement, and maintain cloud infrastructure that meets the highest standards of security, stability, and...


  • New York, New York, United States Emergent365 Full time

    Emergent365 is seeking a highly skilled Cloud Infrastructure Specialist to join our team in Downtown NYC.The ideal candidate will have experience with Azure (Intune, Entra ID, Conditional Access) and a strong background in building and maintaining cloud-based infrastructure.Key Responsibilities:• Engineer and build from scratch cloud infrastructure using...


  • New York, New York, United States Amazon Web Services, Inc. Full time

    About the RoleWe are seeking a highly skilled Cloud Security Solutions Architect to join our team at Amazon Web Services, Inc. as a Senior GTM Specialist Solution Architect. In this role, you will be responsible for creating scaled GTM motions for AWS security services to expand adoption of these services into new or existing customer portfolios.Key...


  • New York, New York, United States Amazon Web Services, Inc. Full time

    About the RoleWe are seeking a highly skilled Cloud Security Solutions Architect to join our team at Amazon Web Services, Inc. as a GTM Specialist Solutions Architect. This is a unique opportunity to work with our customers to help them secure their cloud estates and leverage the optimal AWS security services and capabilities.Key ResponsibilitiesCustomer...


  • New York, New York, United States LS Technologies, LLC Full time

    Cloud Security EngineerLS Technologies, LLC is seeking a highly skilled Cloud Security Engineer to join our team. As a Cloud Security Engineer, you will play a critical role in architecting, developing, deploying, and maintaining server consolidation and virtualization and integrating cloud native and hybrid cloud solutions in support of various FAA Air...


  • New York, New York, United States AmazonWebServices Full time

    About the RoleWe are seeking a highly skilled Cloud Security Solutions Architect to join our team at Amazon Web Services. As a key member of our Worldwide Specialist Organization (WWSO), you will play a critical role in helping our customers secure their cloud estates by providing expertise across the entire life cycle of an AWS customer initiative.Key...


  • New York, New York, United States SS&C Technologies Full time

    Job Title: Principal SRESS&C Technologies is a global leader in investment and financial services software. We're seeking a highly skilled Principal SRE to join our team and lead our Cloud First AWS platforms security efforts.About the RoleThe Principal SRE will manage a small team of engineers, focusing on enhancing the security posture of our cloud...