Senior Security Engineer

at  LSEG London Stock Exchange Group

LSEG is one of the world’s leading providers of financial markets infrastructure and delivers financial data, analytics, news and index products to more than 40,000 customers in over 170 countries. We help organisations fund innovation, handle risk and create jobs by partnering with customers at every point in the trade lifecycle: from informing their pre-trade decisions and executing trades to raising capital, clearing and optimisation.
Backed by more than three centuries of experience, innovative technologies and a team of 25,000 people in over 60 countries, we are driving financial stability, empowering economies and enabling you to grow sustainably
If you have a passion for engineering, an appetite for challenge, and an avid interest in all things security, then read on further!
We have an excellent opportunity within the Cyber Security Engineering Platform team to work in partnership with the Platform, Storage and Collaboration IT teams across the organisation to engineer security controls and embed security standard methodologies across the environment. Handling the engineering and control ownership of cyber capabilities and infrastructure defences. Protecting the group from cyber threats which seek to impact the confidentiality, integrity, and availability of group assets.

Role summary:

• Investigating and analysing complex technology environments, understanding the current security posture and plan and deliver solutions and processes required to bring positive change, improvement and resilience.
• Own controls related to the area and ensure they remain resilient and effective through-out the lifecycle.
• Deliver required outcomes for security programmes and investments and help define the delivery outcomes and stage gates
• Provide domain expertise to tackle and resolve incidents or issues that may occur through business as usual or in response to an event

What you’ll be doing:

• Delivering activities supporting agreed cyber security strategies, crafting project delivery with the project management team and the senior manager of the team.
• Produce quality key artefacts associated with the controls and support evidencing and assurance activities.
• Provide ongoing control operation and effectiveness with evidence gained.
• Reporting, development and management of agreed measures, key performance indicators and key risk indicators.

What you’ll bring:

• Knowledge and experience in Platform, Storage & Collaboration Security, Network Attached Storage and storage area networks. Operating system platforms includes Windows, Linux, Unix, Mac & Mobile Devices. Level of knowledge in the technology area would be considered authoritative in several domains.
• Experience of O365 environment with a well-rounded view of security standard processes, know how to evaluate risk in the O365 environment and formulate controls to reduce the identified risks
• Experience with various O365 security capabilities such as conditional access, defender for cloud apps, defender for office
• In depth knowledge of standard practices and policy configurations for O365 to secure the tenant such as MFA and device compliance
• Understanding of appropriate governance around O365 given the continually evolving security landscape and O365 tool suite.
• Security expertise specifically with inbound controls revolving around protection against phishing and malware and around the complexities that could arise from a large organisation and protecting many employees.
• A good understanding of email authentication and how applications can securely send out emails. The utilisation of SPF, DKIM and DMARC to ensure emails are sent from authorised parties.
• Sound understanding of End User Compute (EUC) security, both for Physical and Virtual environments.
• Broad technology and security knowledge across non-core domain area.
• Structured and methodical solving practices for the most complex problems.
• Work independently, be proactive and will be encouraged to take on problems with sound judgement and in a way that is aligned to good practice and in the long-term interests of the organisation.
• You are likely to hold or be working towards one or more of the following security or engineering/architecture specific certifications, CISSP, OSCP, TOGAF, GIAC or those relevant to the role/domain area.
• Experience and knowledge of technology in financial services and/or regulated environments and industry compliance schemes (for example SWIFT) preferred.

What you’ll get in return:
We recognize that to attract the best talent, we need to be flexible, and we are open to discussing work arrangements with you. We take hybrid approach to our workplace, this role is hybrid/ digital first.
Our culture is built on the foundation of our purpose. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.
We are looking for intellectually curious people, passionate about the bigger picture of how technology industry is evolving, ready to ask difficult questions and deal with complicated scenarios. If you are creative and a problem solver, this is the place to be as will be supporting you to fast-forward your career.

We maximise each employee’s potential through personal development and through a wide range of learning tools both formal and informal. We believe that remunerating our people with competitive salaries and a range of attractive benefits such as:

• 25 days’ holiday per year
• 1 additional day off for your Birthday
• Annual wellness allowance
• Share Purchase Plan
• Medical Health Insurance
• Medical Subscription (preventive medical services)
• Dental Coverage
• Life insurance
• Pillar 3 Private Pension
• Meal Vouchers
• Flexible Benefits
• Bookster
• Volunteering Events
• Team Buildings

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.
Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.
Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. You will be part of a collaborative and creative culture where we encourage new ideas and are committed to sustainability across our global business. You will experience the critical role we have in helping to re-engineer the financial ecosystem to support and drive sustainable economic growth. Together, we are aiming to achieve this growth by accelerating the just transition to net zero, enabling growth of the green economy and creating inclusive economic opportunity.
LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.
We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs.
Please take a moment to read this
privacy notice
carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained,
your rights and how to contact us as a data subject
.
If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice

Role summary:

• Investigating and analysing complex technology environments, understanding the current security posture and plan and deliver solutions and processes required to bring positive change, improvement and resilience.
• Own controls related to the area and ensure they remain resilient and effective through-out the lifecycle.
• Deliver required outcomes for security programmes and investments and help define the delivery outcomes and stage gates
• Provide domain expertise to tackle and resolve incidents or issues that may occur through business as usual or in response to an even

What you’ll be doing:

• Delivering activities supporting agreed cyber security strategies, crafting project delivery with the project management team and the senior manager of the team.
• Produce quality key artefacts associated with the controls and support evidencing and assurance activities.
• Provide ongoing control operation and effectiveness with evidence gained.
• Reporting, development and management of agreed measures, key performance indicators and key risk indicators