# Attack Monitoring Analyst

**Company**: London Stock Exchange Group
**Experience**: mid
**Job type**: full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://lseg.wd3.myworkdayjobs.com/en-US/Careers/job/London-United-Kingdom/Attack-Monitoring-Analyst--GSOC-_R0121991?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_6c8c85d8-d70

## Description

The London Stock Exchange Group seeks an experienced, dedicated and driven Attack Monitoring Analyst to join the Global Security Operations team.

The ideal candidate will have a solid technical background, with a firm understanding of modern attack techniques coupled with knowledge of the typical lifecycle of an attack.

Responsibilities:

- Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary.

- Competently operate a chosen SIEM (e.g. Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards.

- Utilise playbooks, existing knowledge and accurate online resources for guidance when responding to incidents.

- Utilise online resources for researching and collecting threat intelligence to improve the SOC’s abilities to detect cyber-attacks.

- Develop new, or improve existing run books and use cases based on investigations and knowledge of modern attacks.

- Stay up to date with current vulnerabilities, attacks, and countermeasures.

- Identify, respond and remediate cyber events generated through monitoring technologies.

Experience:

- Preferred experience with operating or administrating a SIEM (e.g. Splunk/QRadar/LogRhythm).

- Solid understanding of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware.

- Experience in security event analysis & triage, incident handling and root-cause identification.

- Understanding of tools, techniques and procedures that attackers use to compromise organisations, ideally from direct experience.

- Knowledge of cyber security either academically or within corporate environments.

- Ability to work in a fast-paced and demanding environment while remaining calm.

- Strong verbal and written communication and collaboration skills.

- Security industry specific and core technical accreditations such as OSCP, GIAC, CCNA.

- Certification demonstrating SIEM operational competences.

- Proficient with one or more programming languages (e.g. Python, PowerShell, Java, C#).

The role operates on a "follow-the-sun" shift rotation. Shifts are 1200hrs - 0000hrs (midday to midnight) London Time using a 4 days on, 4 days off rotation.

## Skills

### Required
- SIEM
- incident handling
- threat intelligence
- cyber security
- networking
- programming

### Nice to have
- OSCP
- GIAC
- CCNA
- Python
- PowerShell
- Java
- C#

---

Source: [Apply at lseg.wd3.myworkdayjobs.com](https://lseg.wd3.myworkdayjobs.com/en-US/Careers/job/London-United-Kingdom/Attack-Monitoring-Analyst--GSOC-_R0121991?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)