# Attack Monitoring Shift Lead

**Company**: London Stock Exchange Group (LSEG)
**Location**: Singapore
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://lseg.wd3.myworkdayjobs.com/en-US/Careers/job/Singapore/Attack-Monitoring-Shift-Lead--GSOC-_R0102658-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_a20037c0-88f

## Description

LSEG Security Operations is seeking an Attack Monitoring Shift Lead to lead and manage a team tasked with identifying and responding to cyber security incidents and improving the defensive capabilities of the Global Security Operations Centre (GSOC).

The ideal candidate should have a solid technical background, strong leadership qualities, and excellent people skills. They should possess a firm understanding of modern attack techniques and be knowledgeable about the typical lifecycle of an attack.

Responsibilities:

- Leading and managing a team to identify and respond to cyber security events and incidents.

- Triage security events and employ a methodical and coherent response to security incidents.

- Competently operate a chosen SIEM (e.g., Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards.

- Utilise playbooks, existing knowledge and accurate online resources for guidance when responding to incidents.

- Utilise online resources for researching and collecting threat intelligence to enhance the SOC's abilities to detect cyber-attacks.

- Develop new, or improve existing run books and use cases based on investigations and knowledge of modern attacks.

- Stay up to date with current vulnerabilities, attacks, and countermeasures.

- Identify, respond and remediate cyber events generated through monitoring technologies.

- Serve as a point of escalation for cyber security incident triage and investigation.

Experience:

- Experience with operating or administrating a SIEM (e.g. Splunk/QRadar/LogRhythm).

- Strong working knowledge of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware.

- Experience in security event analysis & triage, incident handling and root-cause identification.

- Understanding of tools, techniques and procedures that attackers use to compromise organisations, ideally from direct experience.

- Experience and knowledge of cyber security in corporate environments.

- Likely will have experience working full time in incident response or offensive security roles.

- Ability to work with a sense of urgency while remaining calm under pressure.

- Strong verbal and written communication and collaboration skills.

- Security industry specific and core technical accreditations such as OSCP, GIAC, CCNA.

- Certification demonstrating SIEM operational competences.

- Competent with one or more programming languages (e.g. Python, PowerShell, Java, C#).

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

## Skills

### Required
- SIEM
- cyber security
- incident response
- threat intelligence
- network security
- communication skills

### Nice to have
- OSCP
- GIAC
- CCNA
- Python
- PowerShell
- Java
- C#

---

Source: [Apply at lseg.wd3.myworkdayjobs.com](https://lseg.wd3.myworkdayjobs.com/en-US/Careers/job/Singapore/Attack-Monitoring-Shift-Lead--GSOC-_R0102658-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)