Location
United Kingdom - Home Based

Hours
Full Time

Salary
Negotiable

About the Role
This opportunity within the Offensive Security Operations team is a crucial role responsible for managing vulnerability discovery, offensive testing, and remediation activities across the London Stock Exchange Group. You will work closely with 3rd party vendors to plan and facilitate testing programmes ensuring efficient execution. Key programmes include Regulatory Threat Intelligence Led Pen Testing (TLTP), Red Teaming, Bug Bounty, Continuous External Attack Surface Management, Active Directory security posture management, and future initiatives aimed at reducing cyber risk at scale. As a domain authority on vulnerability testing, impact, and remediation, you will provide insights on root cause analysis and scalable risk management. The role involves collaboration with internal technical teams and external stakeholders such as BISOs, GSOC, and regulators. You will stay ahead of emerging cybersecurity trends and contribute ideas for continuous improvement and innovation. There are opportunities to explore AI and automation to enhance existing and future security initiatives.

What You'll Be Doing
Collaborate with external vendors, regulators, and leadership teams to coordinate timely delivery of requirements
Review vulnerability reports, validate issues, and triage based on risk
Support teams in understanding vulnerabilities and validate fixes through retesting
Coordinate remediation efforts by detailing actions, owners, timelines, and follow-up
Leverage engineering skills to automate and scale security programme objectives

About London Stock Exchange Group
Join a team that values innovation, quality, and continuous improvement. LSEG is a leading global financial markets infrastructure and data provider, committed to driving financial stability, empowering economies, and enabling sustainable growth. With a diverse workforce of 25,000 people across 65 countries, LSEG fosters an inclusive culture where everyone can grow and fulfil their potential. The organisation is proud to be an equal opportunities employer and supports sustainability, charitable initiatives, and employee wellbeing through tailored benefits and programs.

Experience
Technology-related Bachelor's Degree or equivalent experience and certifications in cybersecurity
Background in Red Teaming, Penetration Testing, or Bug Bounty is advantageous
Experience building AI agentic workflows or deploying and managing security tooling is also advantageous
Understanding of large-scale enterprise IT system environments
Knowledge of security vulnerabilities, common software engineering flaws, and network defence analytical models (Kill Chain, ATT&CK, OWASP Top 10, etc.)

About You
Strong verbal and written communication and presentation skills
Ability to work in a fast-paced environment as a problem solver and barrier breaker with initiative
Collaborative mindset with a passion for continuous learning and innovation

Qualifications
Relevant cybersecurity certifications and a technology-related degree or equivalent experience
Demonstrated expertise in vulnerability testing, impact analysis, and remediation strategies