Hybrid Senior Attack Monitoring Analyst, GSOC

at LSEG (London Stock Exchange Group)

• Job title: Senior Attack Monitoring Analyst, GSOC
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Professional Certificate
• Tech skills: Cyber Security, Java, Python, Splunk, TCP/IP
• Location requirements: Hybrid, London, United Kingdom

About the role

• Senior Attack Monitoring Analyst identifying and responding to cyber security incidents. Joining Global Security Operations team at London Stock Exchange Group for proactive defense strategies.

Responsibilities

• Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary.
• Competently operate a chosen SIEM (e.g., Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards.
• Utilise playbooks, existing knowledge and accurate online resources for guidance when responding to incidents.
• Utilise online resources for researching and collecting threat intelligence to improve the SOC’s abilities to detect cyber-attacks.
• Develop new, or improve existing run books and use cases based on investigations and knowledge of modern attacks.
• Stay up to date with current vulnerabilities, attacks, and countermeasures.
• Identify, respond and remediate cyber events generated through monitoring technologies.

Requirements

• Preferred experience with operating or administrating a SIEM (e.g., Splunk/QRadar/LogRhythm).
• Solid understanding of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware.
• Experience in security event analysis & triage, incident handling and root-cause identification.
• Understanding of tools, techniques and procedures that attackers use to compromise organisations, ideally from direct experience.
• Knowledge of cyber security either academically or within corporate environments.
• Ability to work in a fast-paced and demanding environment while remaining calm.
• Strong verbal and written communication and collaboration skills.
• Security industry specific and core technical accreditations such as OSCP, GIAC, CCNA.
• Certification demonstrating SIEM operational competences.
• Proficient with one or more programming languages (e.g., Python, PowerShell, Java, C#).

Benefits

• healthcare
• retirement planning
• paid volunteering days
• wellbeing initiatives