The Threat & Exposure Management Platform Engineer will design, build, and operate a data platform that integrates threat, vulnerability, and exposure signals across the enterprise. This role is crucial for enhancing the organization's AI-enabled security operations capabilities. The engineer will be responsible for owning complex systems and ensuring the architecture supports automated risk prioritization and response. The position requires deep platform engineering expertise and strong architectural judgment.

• Strong architecture skills with the ability to design end-to-end platform architectures.
• Deep platform engineering expertise with a proven track record in operating complex security data platforms.
• Hands-on experience building large-scale data pipelines using tools such as Kafka, Spark, or Airflow.
• Strong expertise in API design and development, including authentication and rate limiting.
• Proven experience integrating heterogeneous security platforms.
• Strong background in data modeling and correlation engine design.
• Familiarity with mapping known attacker techniques to defensive controls.
• Proficiency in at least one major programming language such as Python, Go, or Java.
• Experience with cloud-native data infrastructure including data lakes and event-driven architectures.
• Solid understanding of core cybersecurity concepts.

• Design, build, and operate scalable data pipelines that ingest and enrich threat signals.
• Develop and maintain API integrations connecting security tools and data lakes.
• Architect and implement correlation logic to support automated risk prioritization.
• Build and evolve the underlying data substrate for enterprise risk data.
• Expose secure APIs for downstream systems to consume unified threat data.
• Support ongoing discovery and validation of exposures across the environment.
• Integrate outputs from adversary emulation into the correlation engine.
• Architect data models that assess defensive coverage against attack techniques.
• Own the uptime and performance of production pipelines and integrations.
• Establish common taxonomies to reconcile inconsistent data formats.
• Collaborate with cross-functional teams to ensure platform outputs meet needs.
• Ensure compliance with security and regulatory requirements.
• Drive automation of data onboarding for new tools.
• Maintain architecture diagrams and integration documentation.

• Citi offers a comprehensive benefits package including competitive pay, stock programs, healthcare coverage, retirement plans, paid time off, parental leave, and programs supporting employee wellbeing and professional development.