Location
London and Singapore (SGP-Singapore-1 Raffles Quay)

Hours
Standard UK business hours (9:00 AM – 6:00 PM GMT) or Singapore hours (preferably 2:00 PM – 10:00 PM SGT). Singapore working hours are flexible and can be adjusted based on candidate availability.

Salary
Negotiable

About the Role
The London Stock Exchange Group (LSEG) is seeking an experienced, dedicated, and driven Senior Attack Monitoring Analyst to join the Global Security Operations Centre (GSOC) team. This role is central to continuously monitoring and responding to cyber security incidents by employing people, processes, and technology. The successful candidate will be responsible for identifying and responding to cyber security incidents and enhancing the defensive capabilities of the GSOC. The ideal candidate will have a strong technical background, a firm understanding of modern attack techniques, and knowledge of the typical lifecycle of cyber attacks. You will triage security events, respond methodically to incidents using playbooks, operate SIEM tools such as Splunk, QRadar, or LogRhythm, and develop monitoring dashboards. You will also research threat intelligence, improve run books and use cases, stay current with vulnerabilities and countermeasures, and remediate cyber events generated through monitoring technologies. Join a dynamic team that values innovation, quality, and continuous improvement, and contribute to a global organisation committed to financial stability and sustainable growth.

Experience
- Operating or administrating SIEM platforms (e.g., Splunk, QRadar, LogRhythm)
- Solid understanding of networks including TCP/IP stack, typical organisational architectures, and common protocols abused by malware
- Security event analysis, triage, incident handling, and root-cause identification
- Knowledge of attacker tools, techniques, and procedures, ideally from direct experience
- Cyber security knowledge gained academically or within corporate environments
- Ability to work calmly in a fast-paced and demanding environment
- Strong verbal and written communication and collaboration skills

About you
Proactive and driven professional with a strong technical mindset, able to adapt to evolving cyber threats and contribute to continuous improvement of security operations. You thrive in collaborative environments and are committed to maintaining high standards of security and operational excellence.

Qualifications
- Security industry certifications such as OSCP, GIAC, CCNA
- Certification demonstrating SIEM operational competence
- Proficiency in one or more programming languages (e.g., Python, PowerShell, Java, C#)