Overview
In this Senior Attack Monitoring Analyst role within LSEG’s Global Security Operations Centre, you identify and respond to cyber security incidents and strengthen the GSOC’s defensive capabilities. You work closely with cross-functional teams to triage events, develop monitoring tools and run books, and stay ahead of evolving threats. The role combines hands-on SIEM operations with threat intelligence to improve detection and response at scale. You will contribute to a security culture that supports sustainable business outcomes and financial stability.
Pay / Benefits
- healthcare
- retirement planning
- paid volunteering days
- wellbeing initiatives
Responsibilities
- Triage security events and respond to incidents using structured playbooks
- Operate or develop monitoring dashboards in SIEM tools (e.g., Splunk/QRadar/LogRhythm)
- Use playbooks and knowledge/resources to guide incident response
- Research threat intelligence to enhance detection capabilities
- Develop or improve run books and use cases based on investigations
- Stay updated on vulnerabilities, attacks, and countermeasures
- Identify, respond to, and remediate cyber events from monitoring technologies
Key requirements
- Experience with operating or administering a SIEM (e.g., Splunk/QRadar/LogRhythm)
- Solid understanding of networks and common protocols abused by malware
- Experience in security event analysis, triage, and root-cause identification
- Knowledge of attacker tools, techniques, and procedures
- Cyber security knowledge from academic or corporate context
- Ability to work in a fast-paced environment and stay calm
- Strong verbal and written communication and collaboration skills
- Security industry accreditations such as OSCP, GIAC, CCNA
- SIEM operational competence certification
- Proficiency in programming languages (e.g., Python, PowerShell, Java, C#)
- Strong communication skills
- Collaborative
- Calm under pressure
- SIEM operation
- Incident handling and analysis
- Threat intelligence research
…
