MAPLEBLOSSOM

GSOC L2 Analyst

LSEG Security Operations is a central function employing people, process and technology to continuously monitor and respond to cyber security incidents. Security Operations spans multiple domains including cyber threat intelligence, cyber threat detection, data loss prevention and cyber incident response.

This role is a GSOC L2 Analyst for the Global Security Operations Centre (GSOC). The role is responsible for identifying and responding to cyber security incidents and enhancing the defensive capabilities of the GSOC.

The ideal candidate will have a strong technical background, with a firm understanding of modern attack techniques coupled with knowledge of the typical lifecycle of an attack.

Shift

Role operates on a shift rotation. Shifts are 07:00 – 19:00 or 08:00 – 20:00 (subject to UK BST) using a 4 days on, 4 days off rotation.

Responsibilities

• Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary.

• Competently operate a chosen SIEM (e.g. Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards.

• Utilise playbooks, existing knowledge and accurate online resources for guidance when responding to incidents.

• Utilise online resources for researching and collecting threat intelligence to enhance the SOC’s abilities to detect cyber-attacks.

• Develop new, or improve existing run books and use cases based on investigations and knowledge of modern attacks.

• Stay up to date with current vulnerabilities, attacks, and countermeasures.

• Identify, respond and remediate cyber events generated through monitoring technologies.

Experience

• Preferred experience with operating or administrating a SIEM (e.g. Splunk/QRadar/LogRhythm).

• Strong working knowledge of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware.

• Experience in security event analysis & triage, incident handling and root-cause identification.

• Understanding of tools, techniques and procedures that attackers use to compromise organisations, ideally from direct experience.

• Knowledge of cyber security either academically or within corporate environments.

• Ability to work with a sense of urgency while remaining calm under pressure.

• Strong verbal and written communication and collaboration skills.

• Security industry specific and core technical accreditations such as OSCP, GIAC, CCNA.

• Certification demonstrating SIEM operational competences.

• Competent with one or more programming languages (e.g. Python, PowerShell, Java, C#).

The Account Manager is responsible for maintaining deep customer relationships to drive account revenue retention and growth. By collaborating with internal partners, the Account Manager delivers exceptional service and a valuable solution. The position will manage a defined book of business aligned by customer segment within a geography and will be accountable for the commercial close of all deals. You will also open up larger solution opportunities and introduce Solution and Proposition Sales.

• Demonstrate deep understanding of the customer decision making process: strategies, priorities and needs


• Maintain solid understanding of Refinitiv propositions to initiate conversations and raise interest across the Refinitiv and FSTE Russell businesses.


• Build and embed a long term trusted advisor relationship within the accounts


• Oversee all commercial activities within accounts, owning the end to end customer relationship


• Show leadership by ensuring all activities are managed properly by their respective Refinitiv owners (retention, administration, closing sales)


• Manage internal and external stakeholders and maintain networks to negotiate and close deals


• Participate in large renewals either leading the negotiations or in partnership with the main stakeholders abroad

Additional Job Description

• Strong understanding of customers (matrix decision making), their business model (universal banking) and workflows is a must


• Industry experience within a large international bank appreciated


• World class relationship building skills in cross cultural environments


• Selling skills (identify, develop and articulate a complex proposition/consultative selling, negotiate)


• Strong interpersonal skills, ability to develop and execute a sales plan, ability to use a variety of technology with a high level of proficiency


• Problem solving--ability to understand, articulate, structure and solve client needs


• Presentation and communication skills: ability to deliver presentations and communicate at all levels within an organization


• University/college degree required, equivalent experience may be considered


• Significant work experience in applicable industry and knowledge of customer workflow required


• Proven account management, sales or marketing experience in a customer facing environment required

Role Purpose

LSEG Security Operations is a central function employing people, process and technology to continuously monitor and respond to cyber security incidents. Security Operations spans multiple domains including cyber threat intelligence, cyber threat detection, data loss prevention and cyber incident response. 



This role is a GSOC L3 Analyst for the Global Security Operations Centre (GSOC). The role is responsible for identifying and responding to cyber security incidents and enhancing the defensive capabilities of the GSOC.



Role Responsibilities

• Serve as a focal technical lead on cyber security events and incidents.


• Provide technical, hands-on incident investigation and support and serve as a primary point of contact with management.


• Conduct complex digital forensics and advanced malware analysis investigations.


• Preserve, harvest and analyse data from computer systems including desktops, servers (virtual/physical) and mobiles.


• Manage the chain of custody for all evidence collected during incidents, security, and forensic investigations.


• Build and enhance defensive capabilities using monitoring technologies including SIEM and EDR.


• Perform proactive threat hunting to identify cyber threats.


• Train level 2 incident responders in the steps to take to investigate and resolve computer security incidents.

Role Requirements

• Experience performing complex digital forensic and incident response investigations, preferably backed with industry recognised certifications.


• Deep knowledge of common operating systems (e.g. macOS, Windows, Unix, Linux) and their associated file systems.


• Proficient with industry-standard incident response toolsets such as EnCase, X-Ways, FTK and Volatility.


• Knowledge of cloud technologies and cloud infrastructures such as AWS, GCP, Azure, O365.


• Experience with conducting log analysis across different components of a typical organisation estate (e.g. OS, network, cloud).


• Deep understanding of advanced cyber adversary tools, techniques and procedures.


• Strong understanding of Security Operations Centre (SOC) practices, processes and procedures.


• Incident response process and procedures including common frameworks (e.g. NIST, SANS).


• Automating and refining incident response procedures/playbooks to maximise SOC efficiencies.


• Policies, standards and security frameworks, NIST, CIS.


• Digital forensics/incident response certification(s) such as SANS, CREST or equivalent.


• Competent with one or more programming languages (e.g. Python, PowerShell, Java, C#).

GSOC L2 Analyst

LSEG Security Operations is a central function employing people, process and technology to continuously monitor and respond to cyber security incidents. Security Operations spans multiple domains including cyber threat intelligence, cyber threat detection, data loss prevention and cyber incident response.

This role is a GSOC L2 Analyst for the Global Security Operations Centre (GSOC). The role is responsible for identifying and responding to cyber security incidents and enhancing the defensive capabilities of the GSOC.

The ideal candidate will have a strong technical background, with a firm understanding of modern attack techniques coupled with knowledge of the typical lifecycle of an attack.

Shift

Role operates on a shift rotation. Shifts are 07:00 – 19:00 or 08:00 – 20:00 (subject to UK BST) using a 4 days on, 4 days off rotation.

Responsibilities

• Triage security events and employ a methodical and coherent response to security incidents adopting playbooks where necessary.

• Competently operate a chosen SIEM (e.g. Splunk/QRadar/LogRhythm) for incident investigations, or for the development of monitoring dashboards.

• Utilise playbooks, existing knowledge and accurate online resources for guidance when responding to incidents.

• Utilise online resources for researching and collecting threat intelligence to enhance the SOC’s abilities to detect cyber-attacks.

• Develop new, or improve existing run books and use cases based on investigations and knowledge of modern attacks.

• Stay up to date with current vulnerabilities, attacks, and countermeasures.

• Identify, respond and remediate cyber events generated through monitoring technologies.

Experience

• Preferred experience with operating or administrating a SIEM (e.g. Splunk/QRadar/LogRhythm).

• Strong working knowledge of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware.

• Experience in security event analysis & triage, incident handling and root-cause identification.

• Understanding of tools, techniques and procedures that attackers use to compromise organisations, ideally from direct experience.

• Knowledge of cyber security either academically or within corporate environments.

• Ability to work with a sense of urgency while remaining calm under pressure.

• Strong verbal and written communication and collaboration skills.

• Security industry specific and core technical accreditations such as OSCP, GIAC, CCNA.

• Certification demonstrating SIEM operational competences.

• Competent with one or more programming languages (e.g. Python, PowerShell, Java, C#).

London Stock Exchange Group (LSEG) house a global Security Operations Center (SOC) responsible for the effective detection, prevention and response of cyber-attacks against LSEG, its employees, assets, business operations and customers. The role of a Security Engineer analyst sits within the heart of the SOC , continuously building and improving detection capability within the department.

LSEG are looking for a passionate and technical security engineer that will enable the effective detection of modern attacker techniques by maintaining the existing detection estate, as well as build new detection capability. The successful candidate will be able to translate the requirements from the Threat Intelligence team in to effective detection capabilities.

Furthermore, you will have an understanding of modern attacker Techniques, Tools and Procedures , have experience in modern SIEM technologies, as well as have a detailed understanding of security controls and how such controls contribute to the detection and prevention of threats.

Furthermore, the ideal candidate will have the following traits:

• Ability to work well under pressure.


• A continuous desire and willingness to learn and develop your existing knowledge and skillset.


• Frequently keeps up-to-date with the latest industry developments, utilising online resources such as blogs, social media and security-specific news outlets.


• Good verbal and written communication skills, with particular ability to communicate technical information to non-technical stakeholder.

Ke y responsibilities of the role:

• Build effective detection use cases within the chosen SIEM while minimising false positives.


• Utilise online resources for researching and collecting threat intelligence to enhance the SOC’s abilities to detect cyber-attacks.


• Utilise telemetry available throughout the LSEG environment to build and improve detection capabilities.


• Testing of existing and new detection use cases.

Essential Skills & Experience:

• Experience with administration of a SIEM


• Strong working knowledge of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware.


• Knowledge of current operating environments (Microsoft & Linux).


• Knowledge of information security protection, detection and authentication systems (firewalls, IDS, IPS, anti-virus, Active Directory etc).


• Understanding of tools, techniques and procedures that attackers use to compromise organisations, ideally from direct experience.

Beneficial skills, experience and certifications:

• Certification demon s trating SIEM operational competences.


• Experience with Security Orchestration, Automation and Response (SOAR) platforms


• Basic knowledge of Python.


• Basic knowledge of AWS.

• Strategic Planning: Develop and execute against strategic account plans


• Solution Sales: Drive sales for all Workflow solutions, professional services, and Risk datafeed offerings within an assigned territory or set of named accounts


• Client Relationships: Gains customer acceptance by explaining Risk value propositions. Leverage knowledge of industry challenges and opportunities to build trust and respect with current and future customers.


• Cross-Team Coordination: Serve as a critical team member of Risk sales.


• Forecasting and Reporting: Provide timely and accurate sales forecasts and reports to inform management’s strategic decision-making.

Additional Job Description

Knowledge & Skill :

• In-depth business and managerial knowledge of a department or sub-function.

• Good knowledge and understanding of related functions

• Applies understanding of current industry trends to analyze and review diverse issues

• Demonstrates people leadership skills



Scope of Impact :

• Provides management and leadership to team leaders or supervisors

• Full accountability for a sub-unit within a department or sub-function

• Assigns work, allocates resources, monitors results, controls costs and manages staff

• Interprets internal and external business issues and recommend solutions

• Applies a broad perspective to identify solutions to complex problems



Strategic Planning & Decision Making :

• Develops departmental plans, including business, production and organizational priorities, which support overall business strategy

• Issues instructions on standard practices and policy application; follows up to determine compliance

• Implements processes to produce desired changes in product line, function, or assigned area of responsibility

• Directs the resolution of complex or unusual technical, operational and organizational problems which may be multi-disciplinary

• Decisions are guided by resource availability, business unit or functional business plans, impacting support and funding of projects, products, services or technologies

Role Responsibilities

• Help develop the sales strategy for the given product segment


• Proactively identify pipeline opportunities


• Structure, consult and close deals against a pre-agreed target


• Effectively manage multiple sales opportunities and apply rigour and discipline to pipeline management and sales forecasting.


• Provide insights and share Refinitiv thought leadership on our pricing & reference data capabilities with customers & prospects


• Deliver customer demonstrations on our Pricing & Reference Data capabilities.

Knowledge and skills:

• 5+ years of industry experience (sales or market)


• Deep market understanding including a) specialist understanding of financial markets b) knowledge of relevant markets c) a strong understanding of customers' business model workflow


• Solid understanding of usage of technologies and requirement for financial data within financial institutions.


• Solid knowledge of regulatory drivers, and their impact on financial services.


• A self-starting sales mindset


• Creative problem solver and good sales ideation skills


• Presentation skills (verbal & written)


• Strong listening skills and interpersonal skills


• Ability to devise, prioritize and execute a sales plan


• Ability to work within a broader team


• Consistent track record in a quota bearing sales environment


• Experience of working with channel partners to drive sales


• Experience selling to C- level executives

Position Summary

Working in the World Check Risk Screening product, the Research Analyst is required to maintain accurate information currency to support the growth of LSEG’s Content business across the region.

Essential responsibilities

• Conduct in-depth research on breaking news in Hong Kong regarding specific AML/CFT related issues.


• Research and extract data from all applicable sources, ensure accuracy and quality of findings by complying with policies and applicable laws.


• Provide regular communication and feedback to client.


• Provide regular status updates on research projects to manager.


• Analyse a wide range of data sources and produce structured reports.

Qualifications

• Knowledge of the political structure in Hong Kong


• Basic understanding of sanctions, law enforcement and regulatory enforcement bodies and relevant national laws concerning the Anti-Money Laundering/Combating the Financing of Terrorism (AML/CFT) regime in Hong Kong.


• Extensive knowledge of all relevant official and credible media sources in Hong Kong.


• Must possess excellent research (internet), analytical and writing skills.


• Proficiency with MS Office and working in an online environment.


• Bachelor’s degree in International Relations, Political Science, or other social science fields.

Education/Certifications

Bachelor’s degree in International Relations, Political Science, or other social science fields. Outstanding recent graduates from other fields may also be considered.

As a part of the Business Operations team in Asia, this role will work in partnership with senior executives across our Asia Leadership and Proposition sales organization and will provide operational support for the delivery of Asia’s KPIs and strategic initiatives. The role has high exposure to LSEG D&A Asia’s senior executives and is expected to bring strategic thinking and analytical skills to support the organization’s growth targets, and lead change management to support the company’s growth.



Working in a fast-paced environment requires the director to strike the balance between influencing the desired behaviors across the key stakeholders whilst enforcing governance and good disciplines when required. In summary, the key personal attributes of the role include:

•Being a source of positive energy with a committed and enthusiastic “can-do” work ethic

•High degree of personal motivation to thrive and proactively deliver results without the need for close supervision

•Ability to think critically, analyze complex data and translate the results into actionable deliverables, messages and reports

•A pragmatic but detailed execution focus with the ability to operate under time pressures to deliver ‘right first time’ information and contributing as part of a closely-knit team

•Ability to prioritize and manage multiple activities by providing innovative solutions to how the business can improve

Key Responsibilities

• Manage the Asia leadership team operating rhythm and supporting key weekly and monthly business review meetings


• Work closely with Head of Proposition Sales and other leads to define strategic campaigns for Asia, build execution plans and help operationalize the above campaigns


• Manage key BI tools such as Tableau to provide fortnightly / monthly updates on performance


• Work with central sales enablement team to ensure key LSEG D&A wide programs are implemented across Asia


• Support the learning agenda for Asia and work with sales enablement lead to plan and execute key learning activities for the frontline


• Driving data driven culture, enabling usage of data analysis to drive sales and decision making


• Lead a team of Business Operations Managers & Analysts

Essential skills and experience

• Strong organizational and project management skills


• Executive-level presence with excellent verbal & written communication skills. Also must possess excellent analytical and strategic thinking skills


• Self-starter, proactive with a strong sense of accountability


• Experience in operating within a matrix structure that includes influencing senior leaders and managing expectations


• Working knowledge of key CRM and BI tools such as Salesforce.com & Tableau


• 10 years+ track record in an operations / strategy / planning / consulting role


• Bachelor degree qualified or above (preferably MBA, finance / strategy related field)

As a specialist in pre-sales and pursuit activities, you will work closely with our Account Managers focusing on sales for our Pricing & Reference Services business, both within existing and new customers.

You will lead on deals and focus on customer prospects, and be seen by customers and colleagues as a subject matter expert in data driven solutions. The role works in close partnership with internal and external partners to proactively drive recurring and once-off sales resulting in revenue growth for the company.

Role Responsibilities

· Help develop the sales strategy for the given product segment

· Proactively identify pipeline opportunities

· Structure, consult and close deals against a pre-agreed target

· Effectively manage multiple sales opportunities and apply rigour and discipline to pipeline management and sales forecasting.

· Provide insights and share Refinitiv thought leadership on our pricing & reference data capabilities with customers & prospects

· Deliver customer demonstrations on our Pricing & Reference Data capabilities.

Knowledge and skills:

· 5+ years of industry experience (sales or market)

· Deep market understanding including a) specialist understanding of financial markets b) knowledge of relevant markets c) a strong understanding of customers' business model workflow

· Solid understanding of usage of technologies and requirement for financial data within financial institutions.

· Solid knowledge of regulatory drivers, and their impact on financial services.

· A self-starting sales mindset

· Creative problem solver and good sales ideation skills

· Presentation skills (verbal & written)

· Strong listening skills and interpersonal skills

· Ability to devise, prioritize and execute a sales plan

· Ability to work within a broader team

· Consistent track record in a quota bearing sales environment

· Experience of working with channel partners to drive sales

· Experience selling to C- level executives

We care about benefits too.

We support our colleagues’ wellbeing with inclusive benefits. So that's support for physical, financial, mental and environmental health, paid time off to volunteer, consumer discounts & savings and so much more. All of which are tailored to your needs and may vary by location. For more details talk to your recruiter.

Our fast paced and supportive environment is only possible due to determined, autonomous problem solvers who love our high performance culture. And as a global business, Refinitiv relies on diversity of culture and thought to deliver on our goals. So we seek hardworking, qualified employees in all our operations around the world−regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under country or local law. Refinitiv is proud to be an Equal Employment Opportunity/Affirmative Action Employer providing a drug-free workplace.

Refinitiv makes reasonable accommodations for applicants and employees with disabilities. If an accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact us to request an accommodation. A full list of our office locations and contact information can be found at: Refinitiv Office Locations.

Be the breakthrough, activate your future and shape ours.