Offensive Security Engineer

OUR PEOPLE:

People are at the heart of what we do and drive the success of our business. Our culture of connecting, creating opportunity and delivering excellence shape how we think, how we do things and how we help our people fulfil their potential. We embrace diversity and actively seek to attract individuals with unique backgrounds and perspectives. We break down barriers and encourage teamwork, enabling innovation and rapid development of solutions that make a difference. Our workplace generates an enriching and rewarding experience for our people and customers alike. Our vision is to build an inclusive culture in which everyone feels encouraged to fulfil their potential.

We know that real personal growth cannot be achieved by simply climbing a career ladder – which is why we encourage and enable a wealth of avenues and interesting opportunities for everyone to broaden and deepen their skills and expertise. As a global organisation spanning 70 countries and one rooted in a culture of growth, opportunity, diversity and innovation, LSEG is a place where everyone can grow, develop and fulfil your potential with meaningful careers.

ROLE SUMMARY:

This opportunity within the Offensive Security Operations team is a crucial role for the management of vulnerability discovery, offensive testing and remediation activities across the group which protects the business from sophisticated cyber threats!

The role holder will work with our 3rd party vendors to plan and facilitate our testing programmes ensuring they run efficiently. The programmes in scope for the role include:

• Regulatory Threat Intelligence Led Pen Testing (TLTP) and Red teaming

• Bug Bounty

• Continuous External Attack Surface Management

• Active Directory security posture management

• Any programme launched in the future aimed at driving down cyber risk at scale

The applicant will be a domain authority on vulnerability testing, impact and remediation. They will provide insight on root cause analysis and scalable risk management. This role requires working closely within a technical team and with external teams like BISOs, GSOC and regulators. The candidate will stay ahead of emerging cyber security thought leadership and share their ideas for areas of improvement and innovation that drive continuous cyber security risk improvement. In this role there are opportunities to explore and experiment with how AI and other types of automation can be used to improve our existing and future initiatives.

WHAT YOU'LL BE DOING:

• Collaborate with external vendors, regulators and leadership teams coordinating the timely delivery of requirements

• Review vulnerability reports, validate issues reported and triage based on risk

• Support teams in understanding vulnerabilities and validate fixes through retesting

• Coordinate remediation efforts by detailing actions, owners, timelines and follow up when appropriate

• Leverage engineering skills to automate and scale security programme objectives

WHAT YOU'LL BRING:

• Technology related Bachelor's Degree or equivalent experience and certifications in cyber security

• Background in Red Teaming / Penetration Testing / Bug Bounty advantageous!

• Experience building AI agentic workflows or deploying and managing security tooling is also advantageous!

• Understanding of large scale enterprise IT system environments

• Knowledge of security vulnerabilities and common software engineering flaws and Network Defence analytical models (Kill Chain, ATT&CK, OWASP top 10etc.)

• Strong verbal & written communication skills & presentation skills

• Ability to work in a fast-paced environment as a problem solver and barrier breaker with initiative

Career Stage:

Senior Associate
London Stock Exchange Group (LSEG) Information:

Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.

Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.

Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.

You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.

If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.

Originally posted on Himalayas