Description
LSEG Security Operations is seeking an Attack Monitoring Shift Lead to lead and manage a team tasked with identifying and responding to cyber security incidents and improving the defensive capabilities of the Global Security Operations Centre (GSOC).
The ideal candidate should have a solid technical background, strong leadership qualities, and excellent people skills. They should possess a firm understanding of modern attack techniques and be knowledgeable about the typical lifecycle of an attack.
Responsibilities:
- Leading and managing a team to identify and respond to cyber security events and incidents.
- Triage security events and employ a methodical and coherent response to security incidents.
- Competently operate a chosen SIEM (e.g., Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards.
- Utilise playbooks, existing knowledge and accurate online resources for guidance when responding to incidents.
- Utilise online resources for researching and collecting threat intelligence to enhance the SOC's abilities to detect cyber-attacks.
- Develop new, or improve existing run books and use cases based on investigations and knowledge of modern attacks.
- Stay up to date with current vulnerabilities, attacks, and countermeasures.
- Identify, respond and remediate cyber events generated through monitoring technologies.
- Serve as a point of escalation for cyber security incident triage and investigation.
Experience:
- Experience with operating or administrating a SIEM (e.g. Splunk/QRadar/LogRhythm).
- Strong working knowledge of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware.
- Experience in security event analysis & triage, incident handling and root-cause identification.
- Understanding of tools, techniques and procedures that attackers use to compromise organisations, ideally from direct experience.
- Experience and knowledge of cyber security in corporate environments.
- Likely will have experience working full time in incident response or offensive security roles.
- Ability to work with a sense of urgency while remaining calm under pressure.
- Strong verbal and written communication and collaboration skills.
- Security industry specific and core technical accreditations such as OSCP, GIAC, CCNA.
- Certification demonstrating SIEM operational competences.
- Competent with one or more programming languages (e.g. Python, PowerShell, Java, C#).
LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.