LSEG Security Operations is a central function employing people, process and technology to continuously monitor and respond to cyber security incidents. Security Operations spans multiple domains including cyber threat intelligence, cyber threat detection, data loss prevention and cyber incident response.

This role sits within the Cyber Threat Intelligence (CTI) team and will provide proactive analysis of the risks to LSEG; help track current cyber threats; and develop and curate threat indicators to help improve the overall quality of LSEG\xe2\x80\x99s defences.

Key responsibilities

• Lead the research, development and implementation of detection rules based on a solid understanding of Cyber adversary TTPs (tactics, techniques and procedures).
• Maintain comprehensive threat actor profiles for priority threat groups.
• Assist with all aspects of threat intelligence management, including setting PIRs (Priority Intelligence Requirements), collection planning and capability development.
• Triage, investigate and remediate threat intelligence derived security events.
• Mentor and develop cyber threat intelligence analysts.
• Partner with other Security Operations teams and the wider LSEG Cyber Security teams to conduct threat intelligence derived investigations.
• Identify and evaluate new sources of intelligence, and integrate into monitoring technologies.
• Develop critical intelligence partnerships to develop and curate high quality threat analysis and indicators.
• Perform cyber threat intelligence activities across the intelligence lifecycle, maintaining a standard of the highest quality and confidentiality across multiple geographies.
• Stay up to date with current vulnerabilities, attacks, and countermeasures.

Technical / job functional knowledge

• Significant knowledge and experience of researching and tracking Cyber threat actors, their tools, techniques and procedures and direct experience of emerging threats across the threat landscape.
• Excellent grasp of current geo-political environment and influencing factor on the Cyber threat environment.
• Background in collecting, analysing, and interpreting data from various sources, detailing the results and preparing substantial analysis products.
• Direct experience using open-source intelligence techniques and platforms.
• Hands-on experience with common Threat Intelligence Platforms (TIP) and curation of technical intelligence content.
• Practical experience of: malware analysis, digital forensics or threat hunting.
• Demonstrable working knowledge of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware.
• Experience in security event analysis and triage, incident handling and root-cause identification.

Personal skills and capabilities

• Ability to work in a fast paced environment, whilst remaining calm under pressure.
• Strong verbal and written communication and collaboration skills.
• Preferred security industry specific and core technical accreditations such as OSCP, GIAC, CCNA.
• Preferred competence with one or more programming/scripting languages (e.g. Python, PowerShell, Java, C#).
• Is willing to go through Government or Industry security clearance process when required.
• Experience with local and multiple country regulations governing cyber intelligence processing and handling of sensitive data.
• Experience conducting cyber threat hunting operations using known adversary tactics, techniques and procedures to detect advanced threats to the enterprise.
• Familiarity with policies, standards and security frameworks e.g. NIST, CIS, MITRE ATT&CK.

Diversity & Inclusion

People are at the heart of what we do and drive the success of our business. Our colleagues thrive personally and professionally through our shared values of Integrity, Partnership, Innovation and Excellence are at the core of our culture. We embrace diversity and actively seek to attract people with unique backgrounds and perspectives. We are always looking at ways to become more agile, so we meet the needs of our teams and customers. We believe that an inclusive collaborative workplace is pivotal to our success and supports the potential and growth of all colleagues at LSEG

At LSEG, we believe that creating a diverse and inclusive organisation is fundamental to the way we deliver on our promise of creating essential partnerships and open opportunities. Our open culture is central to how we deliver our purpose \xe2\x80\x93 driving financial stability, empowering economies and enabling customers to create sustainable growth \xe2\x80\x93 in everything we do.

Working with us means that you will be part of a dynamic organisation of 25,000 people across 70 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. You will be part of a collaborative and creative culture where we encourage new ideas and are committed to sustainability across our global business. You will experience the critical role we have in helping to re-engineer the financial ecosystem to support and drive sustainable economic growth. Together, we are aiming to achieve this growth by accelerating the just transition to net zero, enabling growth of the green economy and creating inclusive economic opportunity.

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone\xe2\x80\x99s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants\' and employees\' religious practices and beliefs, as well as any mental health or physical disability needs.

Please take a moment to read this
privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it\xe2\x80\x99s used for, and how it\xe2\x80\x99s obtained,
your rights and how to contact us as a data subject .
If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.