Senior Security Analyst

London Stock Exchange Group; Bengaluru; Hybrid; INR 1,200,000 - 2,000,000; Full time

Job summary

London Stock Exchange Group in Bengaluru offers a Hybrid role in Cyber Security Engineering, focusing on Vulnerability and Threat Management. The role supports the engineering and operation of VTM technologies to protect confidentiality, integrity and availability.

You will contribute to domain strategies, controls, and reporting, while engaging with cross-functional teams and external partners. The ideal candidate will have hands-on experience in vulnerability/threat management, IaC, scripting,

Qualifications

• Experience in engineering and operation of vulnerability and threat management technologies.
• Knowledge of information security principles and standard methodologies.
• Understanding of Adversary Tools, Techniques and Procedures (TTPs).
• Familiarity with security frameworks such as NIST and CIS.
• Strong documentation skills.

Responsibilities

• Contribute to domain strategies and architectures for Vulnerability and Threat Management.
• Lead and deliver smaller scale projects or workstreams within cyber programme.
• Manage changes to controls and associated artefacts.
• Develop indicators and artefacts to evidence control effectiveness and risk.
• Provide critical issue support for operational incidents.
• Influence vendor roadmaps to support LSEG objectives.

Skills

Vulnerability management

Threat management

Scripting

Infrastructure as Code

Documentation

Security frameworks (NIST/CIS)

Adversary TTPs

Security metrics

Job description

Role Purpose

The Cyber Security Engineering Vulnerability & Threat Management (VTM) team are looking for an independent, pro-active, and aspiring individual who is committed to making a meaningful contribution, as a VTM Analyst. They will play a supporting role utilising their technical experience to enhance VTM solutions that best fit our business requirements. The team are a part of the Cyber Security Engineering function who are developing cyber defence capabilities to protect the business from cyber threats which seek to impact the confidentiality, integrity, and availability of the group. Report to Senior Manager, Vulnerability & Threat Management Direct reports No direct FTE reports. May manage contingents and vendor/partner resources in their deliveries. Key relationships & committees Stakeholders include the wider security team including security architecture, vulnerability and threat management, cyber strategy business function, governance, risk and compliance, programme management. Entity level Business Information Security Officers (BISOs). Infrastructure & Cloud operations, engineering, and architecture teams. Internal risk and audit functions. Architecture and corporate approval forums. External partners/vendors, and industry schemes. Location / flexible working Bengaluru - Hybrid Working

Key responsibilities

• Contribute to domain strategies and architectures, leads on engineering and the associated artefacts across the areas of Vulnerability and Threat management.
• Be responsible for the controls related to the domain area and ensure they remain effective.
• Lead and deliver smaller scale projects or discrete workstreams for larger projects as part of the cyber programme and other initiatives.
• Manage and deliver changes to controls as necessary which are not part of project activity.
• Develop key indicators, analysis and artefacts to continually evidence and report control effectiveness and risk for the group.
• Critical issue support for any operational incident from operations or global security operations centre for related domain technologies.
• Accountable for ongoing activities and objectives for the domain area.
• Solve complex problems related to the domain area.
• Remain current with principles, concepts and emerging technologies related to the role.
• Influence vendor roadmaps and functionality in support of LSEG objectives.

Leadership responsibilities

• This role is an individual contributor and leads no FTE headcount.
• Critical work Delivery of activities against of agreed cyber security strategies.
• Shapes project delivery with the project management team and the senior manager of the domain area.
• Delivery of key artefacts associated with the role, artefacts support evidencing and assurance activities.
• Ongoing control operation and effectiveness and evidencing of such.
• Reporting, development and management of agreed measures, key performance indicators and key risk indicators.
• Key critical metrics Delivery of projects and BAU activities within agreed timescales to the required standard.
• Issues that are identified are fixed and remain fixed and are not recurring.
• Key artefacts for the activities performed exist, are accurate and of required standard.
• Agreed measures related to controls owned by the role, for example Key Risk Indicators, are delivered and managed.

Technical / job functional knowledge

• Knowledge and experience in the engineering and operation of vulnerability and threat management technologies and the integration with relevant platforms.
• Level of knowledge in the domain technology area would be considered competent.
• Knowledge of different operating systems, platforms, and applications where relevant for the domain area and implications for those platforms.
• Level of knowledge would be considered proficient.
• Engineering of layered control capabilities.
• An understanding of information security principles and standard methodologies.
• A good understanding of Adversary Tools, Techniques and Procedures (TTPs) is required.
• Knowledge in domain area and basic knowledge across non-core domain areas.
• Modern engineering practices, automation to drive efficiencies.
• Infrastructure as Code mentality.
• Code / scripting for practical tasks and tool integrations.
• Structured and methodical problem-solving practices for resolving sophisticated problems.
• Policies, standards and security frameworks, NIST, CIS.
• Strong skills to author formal documentation.
• Understanding of security metrics to measure control operation and risk.

Leadership and management experience

Experience in advocating for and inspiring change to reach the best outcome according to the needs of the organisation, customers and industry trends.

Personal skills and capabilities

Collaborating across the group to deliver successful balanced outcomes for the group and its partners. Takes ownership and commits to delivering sustainable outcomes and resolving problems. Demonstrates a bias for action. Consistent track record of delivering results without compromising on quality. Critical thinker takes in broad perspectives to assess and make decisions. Willingness and flexibility to work across different technologies. Capability to quickly assimilate new concepts and technologies. Takes ownership of own career development and learning. Supports colleagues with less experience to help in their professional growth. Adapts messaging and presentation styles to the requirements of the audience. Is measured and considered in complicated and fast paced situations.

Diversity & Inclusion

People are at the heart of what we do and drive the success of our business. Our colleagues thrive personally and professionally through our shared values of Integrity, Partnership, Innovation and Excellence are at the core of our culture. We embrace diversity and actively seek to attract people with unique backgrounds and perspectives. We are always looking at ways to become more agile, so we meet the needs of our teams and customers. We believe that an inclusive collaborative workplace is pivotal to our success and supports the potential and growth of all colleagues at LSEG Proud to share LSEG in the India is Great Place to Work certified (Jun '25 – Jun '26). Learn more about life and purpose of our company directly from India colleagues’ video: Bengaluru, India | Where We Work | LSEG Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.

About LSEG

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions. Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering. LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

Equal Opportunities Employer

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law.