Attack Monitoring Analyst (GSOC)

Company: London Stock Exchange Group
Apply for the Attack Monitoring Analyst (GSOC)
Location: London
Job Description:

Overview

In this role, you will monitor and respond to cyber security incidents within LSEG’s Global Security Operations Centre. You will leverage your technical background to detect modern attack techniques and strengthen defensive capabilities. You will work closely with cross-functional teams to improve detection, triage, and response using playbooks and threat intelligence. This is a follow-the-sun role that places high emphasis on vigilance, collaboration, and continuous improvement in a fast-paced environment.

Pay / Benefits

  • healthcare
  • retirement planning
  • paid volunteering days
  • wellbeing initiatives

Responsibilities

  • Triage security events and respond to incidents using playbooks where appropriate
  • Operate or develop dashboards in a SIEM (e.g., Splunk, QRadar, LogRhythm) for investigations
  • Research threat intelligence and use it to improve detection capabilities
  • Develop or enhance run books and use cases based on investigations and modern attack knowledge
  • Stay updated on vulnerabilities, attacks, and countermeasures
  • Identify, respond to, and remediate events generated by monitoring technologies

Key requirements

  • Solid SIEM experience (e.g., Splunk, QRadar, or LogRhythm)
  • Strong networking knowledge (TCP/IP, architectures, common malware protocols)
  • Experience in security event analysis, triage, and incident handling
  • Understanding of attacker techniques and procedures to compromise organisations
  • Formal cyber security knowledge (academic or professional)
  • Ability to work under pressure in a fast-paced environment with calm
  • Strong verbal and written communication and collaboration skills
  • Security certifications such as OSCP, GIAC, CCNA
  • SIEM operational certification
  • Proficiency in one or more programming languages (Python, PowerShell, Java, C#)
  • Strong verbal and written communication
  • Collaboration with cross-functional teams
  • Calmness under pressure
  • SIEM (Splunk/QRadar/LogRhythm)
  • Networking and TCP/IP understanding
  • Incident analysis and root-cause identification

…

Posted: October 1st, 2026