Senior Attack Monitoring Analyst, GSOC
LSEG (London Stock Exchange Group)
full-time
Posted on:
Location Type: Office
Location: London • United Kingdom
Visit company websiteExplore more
Job Level
Tech Stack
About the role
- Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary.
- Competently operate a chosen SIEM (e.g., Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards.
- Utilise playbooks, existing knowledge and accurate online resources for guidance when responding to incidents.
- Utilise online resources for researching and collecting threat intelligence to improve the SOC’s abilities to detect cyber-attacks.
- Develop new, or improve existing run books and use cases based on investigations and knowledge of modern attacks.
- Stay up to date with current vulnerabilities, attacks, and countermeasures.
- Identify, respond and remediate cyber events generated through monitoring technologies.
Requirements
- Preferred experience with operating or administrating a SIEM (e.g., Splunk/QRadar/LogRhythm).
- Solid understanding of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware.
- Experience in security event analysis & triage, incident handling and root-cause identification.
- Understanding of tools, techniques and procedures that attackers use to compromise organisations, ideally from direct experience.
- Knowledge of cyber security either academically or within corporate environments.
- Ability to work in a fast-paced and demanding environment while remaining calm.
- Strong verbal and written communication and collaboration skills.
- Security industry specific and core technical accreditations such as OSCP, GIAC, CCNA.
- Certification demonstrating SIEM operational competences.
- Proficient with one or more programming languages (e.g., Python, PowerShell, Java, C#).
Benefits
- Healthcare
- Retirement planning
- Paid volunteering days
- Wellbeing initiatives
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
SIEMSplunkQRadarLogRhythmTCP/IPincident handlingroot-cause identificationprogramming languagesPythonPowerShell
Soft Skills
calm under pressureverbal communicationwritten communicationcollaboration
Certifications
OSCPGIACCCNASIEM operational competence