# Principal Attack Monitoring Analyst (GSOC) at LSEG

LSEG is hiring a Principal Attack Monitoring Analyst (GSOC) in Singapore, Singapore. Level rates it Little AI ●○○○; you can [apply on Level](https://jobsbylevel.com/go/42be6450-13e9-42a7-ab7f-5367b9a9fc23?utm_medium=ai-agent).

AI Level 1, AI centrality 37 out of 100. Singapore - Raffles Quay.

## Details

- Company: [LSEG](https://jobsbylevel.com/companies/lseg)
- AI level: AI Level 1 (score 37 out of 100)
- Location: Singapore - Raffles Quay
- Posted: October 14, 2026
- Apply: https://jobsbylevel.com/go/42be6450-13e9-42a7-ab7f-5367b9a9fc23?utm_medium=ai-agent

## Description

LSEG Security Operations is a central function that leverages people, processes, and technology to continuously monitor, detect, investigate, and respond to cyber security threats and incidents. Security Operations spans multiple disciplines, including Cyber Threat Intelligence, Security Analytics & Automation, Data Loss Prevention, Attack Monitoring and Cyber Incident Response. This role plays a critical part in protecting the Group from cyber threats that may impact business operations. As a senior member of the Attack Monitoring team, you will provide technical leadership for investigations, support analyst development, and identify opportunities to enhance detection and response capabilities. You will work closely with Incident Response teams, ensuring significant incidents are escalated appropriately while maintaining ownership of technical investigation activities within Attack Monitoring. Responsibilities Act as the primary technical escalation point for cyber security alerts managed by the Attack Monitoring team. Lead complex investigations and provide hands-on technical analysis across a broad range of cyber security events and alerts. Serve as a senior technical leader and subject matter expert for Attack Monitoring analysts. Coach, mentor, and develop analysts, helping to strengthen the team's investigative capabilities and technical expertise. Assess incidents and investigations to determine when escalation to Incident Response is required, working closely with Incident Response teams to ensure effective handover and collaboration. Review alert volumes, trends, and investigation outcomes to identify opportunities to improve detection fidelity, reduce false positives, and enhance operational effectiveness. Partner with stakeholders across Security Operations to recommend and drive improvements to detection, monitoring, triage, and response processes. Identify opportunities to improve analyst workflows through automation and process optimisation, supporting implementation teams where appropriate. Develop and maintain investigation playbooks, alert guides, and knowledge articles informed by incident learnings, threat intelligence, and emerging attack techniques. Contribute to the continual improvement of Security Operations capabilities, processes, and procedures through innovation and technical expertise. Experience Significant experience within a Security Operations Centre (SOC), Threat Detection and Monitoring, Incident Response, Digital Forensics, or a related cyber security function. Proven experience conducting end-to-end investigations across a wide range of cyber security alerts. Demonstrated experience coaching, mentoring, and developing technical teams. Track record of identifying and implementing operational improvements through innovation, automation, and subject matter expertise. Deep understanding of modern cyber adversary tactics, techniques, and procedures (TTPs). Advanced knowledge of operating systems including Windows, Linux, Unix, and macOS, as well as their associated artefacts and file systems. Experience investigating activity across enterprise environments, including endpoint, network, identity, and cloud-based technologies. Knowledge of public cloud platforms and services, including AWS, Azure, GCP, and Microsoft 365. Experience performing log analysis across multiple technology domains, including operating systems, network infrastructure, cloud platforms, and security tooling. Strong knowledge of Security Operations Centre practices, processes, and operating models. Strong understanding of incident response methodologies and frameworks, including NIST, SANS, or equivalent. Excellent written and verbal communication skills, with the ability to communicate technical concepts to both technical and non-technical audiences. Preferred Experience within global financial services and/or highly regulated environments. Industry-recognised certifications in Incident Response, Digital Forensics, Threat

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/principal-attack-monitoring-analyst-gsoc-at-lseg-fbebfc

Source: https://jobsbylevel.com/jobs/principal-attack-monitoring-analyst-gsoc-at-lseg-fbebfc

## Cite this page

Level. https://jobsbylevel.com/jobs/principal-attack-monitoring-analyst-gsoc-at-lseg-fbebfc.

Get job alerts: https://jobsbylevel.com/newsletter