Cyber Attack Monitoring Shift Lead (SOC)

FTSE INTERNATIONAL LIMITED SINGAPORE BRANCH; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

The London Stock Exchange Group (LSEG) is seeking an Attack Monitoring Shift Lead for its Global Security Operations Centre. You will lead a team to identify and respond to cyber security incidents, strengthen defensive capabilities, and leverage SIEM tools to investigate events.

Ideal candidates have strong technical background, leadership, and excellent communication skills. Shifts run 07:00-19:00 or 08:00-20:00 SGT with 4-on/4-off rotation, requiring vigilance under pressure.

Qualifications

• Experience with operating or administrating a SIEM (e.g., Splunk, QRadar, LogRhythm).
• Strong networking knowledge: TCP/IP, architectures, protocols abused by malware.
• Experience in security event analysis, triage, incident handling and root-cause identification.
• Understanding attackers’ tools, techniques and procedures in corporate environments.
• Develop or improve run books and use cases based on investigations and modern attacks.
• Experience in cyber security within enterprise environments and likely in incident response or offensive security roles.

Responsibilities

• Lead and manage a team to identify and respond to cyber security events and incidents.
• Triage security events and implement a structured response to incidents.
• Operate a SIEM for investigations or dashboard development.
• Use playbooks and online resources to guide incident response.
• Research threat intelligence to enhance SOC detection capabilities.
• Develop or improve run books and detections based on investigations.

Skills

SIEM

Networks

Incident analysis

Attack techniques

Playbooks

Threat intel

Communication

Certifications

Scripting

Job description

The London Stock Exchange Group (LSEG) is seeking an Attack Monitoring Shift Lead for its Global Security Operations Centre. You will lead a team to identify and respond to cyber security incidents, strengthen defensive capabilities, and leverage SIEM tools to investigate events.

Ideal candidates have strong technical background, leadership, and excellent communication skills. Shifts run 07:00-19:00 or 08:00-20:00 SGT with 4-on/4-off rotation, requiring vigilance under pressure.