Senior Intelligence Analyst – Assistant Vice… at Citibank · Budapest

Are you looking for a career move that will place you in a global financial organization? Then bring your skills in fraud analysis, cyber threat intelligence, financial crime investigation and communication to Citi’s CSIS Team.

By joining Citi, you will become part of a global organization whose mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress.

Team/Role Overview

Citi Security and Investigative Services (CSIS) is a full-service security and investigative team that protects the assets, integrity, and reputation of Citi and its clients as the industry-leading provider of security, investigations, and intelligence. The CSIS Advanced Analytics and Cyber OSINT program delivers timely, actionable intelligence to Citi stakeholders through collection and analysis using both open-source and internal data sources, supporting complex financial crime investigations, cyber-enabled fraud matters, and high-risk security events. The program drives efficiencies through the creation, integration, and deployment of custom analytical tools and intelligence capabilities into the hands of analysts and investigators across the enterprise.

The Senior Intelligence Analyst — Business Email Compromise & Wire Fraud is an intermediate level position within the CSIS Advanced Analytics and Cyber OSINT program, specializing in the detection, analysis, and disruption of business email compromise (BEC) schemes and wire fraud operations targeting Citi and its clients. The incumbent will serve as a subject matter expert on BEC actor tradecraft, wire fraud typologies, money movement patterns, and the industries and client segments most frequently targeted by financially motivated threat actors. This role bridges the disciplines of cyber threat intelligence, financial crime analysis, and investigative support — producing actionable intelligence that directly informs fraud prevention, client protection, and law enforcement referral efforts.

What you’ll do

• Serve as the primary subject matter expert on business email compromise, wire fraud, and cyber-enabled financial crime, maintaining current and comprehensive knowledge of actor methodologies, fraud typologies, and evolving attack vector.
• Apply in-depth disciplinary knowledge to triage, process, analyze, intelligence alerts, reports, and briefings
• Monitor and research cyber threats (with a strong focus on Business Email Compromise (BEC) and wire fraud) with a direct or indirect impact to the Citi brand
• Monitor open-source, dark web, and proprietary intelligence sources for emerging BEC campaigns, compromised credential markets, fraudulent domain registrations, and threat actor communications targeting financial institutions and their clients
• Assess cyber threat data and correlate with existing understanding of cyber threats impacting the Citi franchise
• Ascertain the impact of an attack and develop threat trends to assess their overall impact and inform senior decision makers
• Produce timely, accurate, and actionable intelligence reports, bulletins, and briefings for consumption by fraud operations, client advisory teams, compliance, legal, and senior leadership stakeholders.
• Engage in liaison activities with intelligence communities, law enforcement, industry partners, peer financial institutions, and information sharing communities
• Complete the daily operational components of the intelligence mission
• Assume informal/formal mentor role within teams and assist with the coaching and training of new team members

What we’ll need from you

• 5+ years of experience in a combination of cyber threat intelligence, financial crime investigation, fraud analysis, or law enforcement roles with a focus on BEC, wire fraud, or cyber-enabled financial crime. Prior experience in a financial institution, government agency, law enforcement, or financial intelligence unit (FIU) environment is strongly preferred.
• Bachelor’s degree (or equivalent experience) required; advanced degrees are welcomed, preferably in a STEM major, computer science, cyber security, or cyber technology.
• Certifications from EC-Council, GIAC, (ISC)² [CISSP, C/EH, GCIA, CCNA] or relevant technical or specialty areas are a plus, or willingness to earn within 12 months of joining.
• Subject matter expertise in business email compromise — including vendor email compromise (VEC), CEO fraud, payroll diversion, real estate wire fraud, and invoice manipulation schemes — with a thorough understanding of actor tactics, techniques, and procedures at each stage of the attack lifecycle.
• Strong understanding of the industry’s most frequently targeted by BEC actors, including real estate and title companies, legal firms, healthcare, manufacturing, construction, government contractors, and financial services, with the ability to tailor intelligence products to sector-specific risk profiles.
• Proficiency in open-source intelligence (OSINT) techniques including domain and email header analysis, WHOIS and passive DNS investigation, social media intelligence, dark web monitoring, and fraudulent infrastructure identification.
• Experience with link analysis platforms such as Palantir, Maltego, or i2 Analyst's Notebook to map actor networks, financial flows, and entity relationships across complex multi-jurisdictional cases.
• Working knowledge of financial crime typologies including trade-based money laundering, layering techniques, and the use of cryptocurrency exchanges and peer-to-peer platforms to convert and obscure BEC proceeds.
• Experience with scripting languages such as Python or similar tools for automating intelligence collection, data enrichment, and pattern analysis across large datasets.
• Excellent written and verbal communication skills, with demonstrated ability to produce clear, concise, and well-structured intelligence products for both technical investigators and non-technical business stakeholders.
• Proven analytical skills including the ability to synthesize large volumes of structured and unstructured data, identify meaningful patterns, and draw sound, evidence-based conclusions under time pressure.
• Proven relationship management and influencing skills, with experience collaborating across fraud operations, compliance, legal, technology, and external law enforcement or government partners.

What we can offer you

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program
• Home Office Allowance (for colleagues working in hybrid work models)
• Paid Parental Leave Program (maternity and paternity leave)
• Private Medical Care Program and onsite medical rooms at our offices
• Pension Plan Contribution to voluntary pension fund
• Group Life Insurance
• Employee Assistance Program
• Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
• Flexible work arrangements to support you in managing work - life balance
• Career progression opportunities across geographies and business lines
• Socially active employee communities with diverse networking opportunities

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.

Sounds like Citi has everything you need? Then apply to discover the true extent of your capabilities.

#LI-MF1

---

Job Family Group:

Technology

Job Family:

Information Security

Time Type:

Full time

Primary Location Full Time Salary Range:

12 211 560,00 Ft - 20 474 640,00 Ft

Most Relevant Skills

Please see the requirements listed above.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.