Senior Security Specialist, London Stock Exchange
Stock exchange in the City of London
Open for applications
Stock exchange in the City of London
501-1000 employees
Open for applications
501-1000 employees
Company mission
To make things happen, out there in the real world, where it matters.
Role
Who you are
- Technology related Bachelor's Degree or equivalent experience and certifications in cyber security
- One or more of the following security certifications OSCP, OSCE, OSEE, OSWE, CREST, GXPEN preferred
- Demonstrable experience in Red Teaming and Penetration Testing
- Minimum 3 years of deep, hands-on, technical security experience with at least one of: multiple security technologies such as Firewalls, IDS/IPS, Web Proxies and DLP among others, Web Applications and Services, Cryptography, Social Engineering and Open Source Intelligence Gathering (OSINT), Mobile platforms, Software Security, malware reverse engineering
- Deep technical understanding of enterprise operating system environments, Active Directory and networking
- Validated understanding of security vulnerabilities and common software engineering flaws
- Familiarity with red teaming related regulations and frameworks (DORA/CBEST/TIBER) nice to have
- Familiarity with Network Defence analytical models (Kill Chain, ATT&CK, etc.)
- Familiarity with popular scripting languages and ability to automate simple tasks
- Experience working with Financial Services and Critical Infrastructure a plus
- Strong verbal & written communication skills & presentation skills
- Ability to work in a fast-paced environment
- Problem solver and barrier breaker with initiative
What the job involves
- This Security Testing Operations (STO) Senior Associate role is a crucial role for the offensive testing programme across the group, which protects the business from our most sophisticated cyber threats!
- The role holder will plan and complete offensive security simulations targeting assets across the enterprise as well as provide technical support for our bug bounty and perimeter asset monitoring programmes
- Finally the candidate will find opportunities for and support the development of tools or processes which drive high impact risk mitigation through automation
- The applicant will be a domain authority on vulnerability exploitation
- This role requires working in a tight-nit technical team, with external partners, BISOs, the GSOC, and other entities
- Plan, lead and carry out red teams / purple teams and penetration tests where you assume the role of a threat actor to meet specified objectives
- Co-ordinate with external 3rd party vendors to enable vulnerability discovery
- Provide constructive feedback to team responsible for incident response and product development on their successes, failures and potential areas of improvement
- Study and replicate tactics, techniques and procedures used by modern attackers to improve the security of our products and corporate environment
- Efficiently report analysis and findings in the most accessible way (written reports, Jira, tickets, presentations etc)
- Develop, modify and extend tools/exploits that assist with execution of security assessments, including custom tools and automation
Salary benchmarks
Our take
The London Stock Exchange is one of the world’s oldest stock exchanges, with a history dating back over 300 years. It operates as a part of LSEG (London Stock Exchange Group), one of the world’s leading providers of financial markets infrastructure, as a marketplace to enable stock brokers and traders to buy and sell stocks, bonds, and other securities.
The London Stock Exchange has lived through a stream of innovations; from telegraph and telephone, to the Market Price Display System, automatic trade matching, and the digitisation of issuer services. In 2019 it acquired Refinitiv, a financial information company, and in doing so became a global financial news and data business.
Most recently, the London Stock Exchange has made moves to support the evolution of private markets, and further build its presence in this space. It partnered with Floww, a platform that connects investors with private companies, with aims to launch a private primary capital raising facility, as well as explore new technologies and secondary market options for the platform.
Steph
Company Specialist at Welcome to the Jungle
Insights
21% employee growth in 12 months
Company
Funding (2 rounds)
Dec 2019
$26.6m
LATE VC
Feb 2018
$26.6m
LATE VC
Total funding: $53.1m
Company benefits
- Hybrid working options
- Healthcare
- Retirement planning
- Paid volunteering days
- Wellbeing initiatives
Company HQ
City of London, London, UK
Leadership
David Schwimmer
(CEO, not founder)Was Managing Director at Goldman Sachs for 20 years.
Share this job
View 86 more jobs at London Stock Exchange