Location
Raffles Quay, London or Singapore

Hours
Standard UK business hours (9:00 AM – 6:00 PM GMT) or Singapore hours (preferably 2:00 PM – 10:00 PM SGT). Singapore hours are flexible and can be adjusted based on candidate availability.

Salary
Negotiable

About the Role
The London Stock Exchange Group (LSEG) is seeking a dedicated and experienced Senior Attack Monitoring Analyst to join the Global Security Operations Centre (GSOC) team. This role is central to continuously monitoring and responding to cyber security incidents by employing people, process, and technology. The successful candidate will be responsible for identifying and responding to cyber security incidents and enhancing the defensive capabilities of the GSOC. The ideal candidate will have a strong technical background, a firm understanding of modern attack techniques, and knowledge of the typical lifecycle of cyber attacks. You will triage security events, respond methodically to incidents using established playbooks, operate SIEM tools such as Splunk, QRadar, or LogRhythm, and develop monitoring dashboards and run books. Staying current with vulnerabilities, attacks, and countermeasures is essential, as is researching threat intelligence to improve SOC detection capabilities. This role offers the opportunity to work in a fast-paced, demanding environment within a global financial markets infrastructure and data provider that values innovation, quality, and continuous improvement.

Experience
- Operating or administrating SIEM platforms (e.g., Splunk, QRadar, LogRhythm)
- Security event analysis, triage, incident handling, and root-cause identification
- Solid understanding of networks including TCP/IP stack, typical organizational architectures, and protocols commonly abused by malware
- Knowledge of attacker tools, techniques, and procedures, ideally from direct experience
- Cyber security knowledge gained academically or within corporate environments
- Ability to work calmly in a fast-paced and demanding environment
- Strong verbal and written communication and collaboration skills

About you
Proactive, detail-oriented, and driven to improve security operations. You thrive in dynamic environments and are committed to continuous learning and innovation. You value teamwork and clear communication and are motivated to make a significant impact within a global organisation.

Qualifications
- Security industry certifications such as OSCP, GIAC, CCNA
- Certifications demonstrating SIEM operational competence
- Proficiency in one or more programming languages (e.g., Python, PowerShell, Java, C#)