Location
London

Hours
Full Time

Salary
Negotiable

About the Role
LSEG Security Operations is a central function employing people, process and technology to continuously monitor and respond to cyber-security incidents. This role sits within the Cyber Threat Intelligence (CTI) team, helping the organisation understand the cyber threats that matter most to LSEG and turn that understanding into action. As a CTI Analyst, you will research and assess cyber threats relevant to LSEG, track adversaries and their evolving tactics, techniques and procedures (TTPs), and produce timely, actionable intelligence for consumers across Cyber Security and the wider organisation. You will work across the intelligence lifecycle, combining information from internal telemetry, commercial and open-source intelligence, trusted intelligence-sharing communities and geopolitical reporting to identify emerging threats, answer intelligence requirements and provide assessments that support security decision-making. The role provides the opportunity to work across tactical, operational and strategic intelligence, supporting activities including adversary tracking, threat hunting, detection engineering, vulnerability management and incident response.

About LSEG
LSEG (London Stock Exchange Group) is a diversified global financial markets infrastructure and data business dedicated to excellence in delivering trusted services. With over 300 years of history, LSEG supports financial stability and growth worldwide through a comprehensive suite of market infrastructure services and an open-access model. Headquartered in the UK, LSEG operates in 70 countries with 25,000 employees globally. Our culture embraces diversity, innovation and personal growth, fostering an inclusive environment where everyone can fulfil their potential.

Experience
- Solid understanding of the modern cyber threat landscape and adversary behaviours and TTPs.
- Demonstrable knowledge of the MITRE ATT&CK framework and its application to CTI.
- Understanding of attack pathways and enterprise security technologies, protocols and controls.
- Ability to conduct effective open-source research and critically evaluate information reliability.
- Experience working within CTI, security operations, incident response, threat hunting or related cyber-security functions is desirable.
- Experience developing intelligence-led threat hunting or detection hypotheses is advantageous.
- Familiarity with scripting or data analysis using Python or PowerShell is desirable.
- Knowledge of intelligence-sharing standards such as STIX/TAXII and structured analytical techniques is a plus.

About you
- Intellectual curiosity and authentic interest in understanding cyber adversaries.
- Strong critical-thinking skills with ability to challenge assumptions and draw conclusions from partial or contradictory information.
- Excellent written and verbal communication skills, able to adapt intelligence for different audiences.
- Ability to prioritise and deliver high-quality analysis in a fast-paced environment.
- Collaborative approach with ability to build effective relationships across teams and partners.
- Willingness to continually develop technical knowledge and subject-matter expertise.

Qualifications
No specific formal qualifications are mandated, but relevant experience and a strong analytical mindset are essential. A background in cyber security, intelligence analysis or related disciplines is highly beneficial.