Cyber Threat Intelligence Analyst

LSEG Security Operations is a central function employing people, process and technology to continuously monitor and respond to cyber-security incidents. This role sits within the Cyber Threat Intelligence (CTI) team, helping the organisation understand the cyber threats that matter most to LSEG and turn that understanding into action. As a CTI Analyst, you will research and assess cyber threats relevant to LSEG, track adversaries and their evolving tactics, techniques and procedures (TTPs), and produce timely, actionable intelligence for consumers across Cyber Security and the wider organisation.

Responsibilities

Research, analyse and assess cyber threats relevant to LSEG, its customers, people, technology and global operations; Maintain awareness of threat actors, campaigns and emerging threats, identifying changes in adversary intent, capability, targeting and TTPs; Produce clear, concise and actionable intelligence products for technical, operational and senior consumers; Apply structured analytical techniques and intelligence tradecraft to develop evidence-based assessments, clearly presenting analytic confidence, assumptions and intelligence gaps; Work across all stages of the intelligence lifecycle to understand consumer intelligence requirements, collect and evaluate relevant information, produce intelligence and assess its impact; Identify emerging threats and changes in the threat landscape, including significant vulnerabilities, attack techniques and geopolitical developments with potential implications for LSEG; Develop intelligence-led hypotheses and work with threat hunting and detection teams to identify previously unknown or undetected malicious activity; Provide intelligence support to cyber incidents and investigations, helping intelligence consumers understand adversary behaviour, likely objectives, TTPs and potential next steps; Find opportunities to translate adversary intelligence into improvements to LSEG's preventative and detective security controls; Develop and maintain relationships with intelligence consumers, industry peers, intelligence-sharing communities and our partners; Contribute to the continuous development of the CTI team's processes, methodologies, tooling and other capabilities; Stay abreast of developments across the threat landscape and continually develop expertise in adversaries and threat areas

Requirements

Familiarity with the modern cyber threat landscape, adversary behaviours and common tactics, techniques and procedures (TTPs); Awareness of the MITRE ATT&CK framework and its application to CTI; Ability to conduct effective open-source research, critically evaluate the reliability and credibility of information and sources and formulate logical and reasoned assessments of threat; Ability to communicate sophisticated technical and threat information clearly to both technical and non-technical audiences; Strong written analytical skills, including the ability to distinguish fact from assessment and communicate uncertainty using the appropriate intelligence lexicon; A curiosity about geopolitical, technological and criminal developments and their potential influence on cyber threat activity

Nice to have

Previous experience of working in a threat intelligence or cyber-related field is desirable, but not essential; Superb communication and teamwork skills and the ability to work with colleagues located around the world

Benefits

Healthcare; Retirement planning; Paid volunteering days; Wellbeing initiatives