Principal Security Engineer

Role Purpose

• Managing the strategy, architecture, engineering and control ownership of cyber capabilities and infrastructure defences. Protects the group from cyber threats which seek to impact the confidentiality, integrity, and availability of group assets. Domain area is Platform, Storage & Collaboration Security.

Key relationships & committees

• Stakeholders include the wider security team including security architecture, cyber strategy business function, governance, risk and compliance, global security operations centre. Programme management. Entity level Business Information Security Officers (BISOs). Infrastructure & Cloud operations, engineering and architectures teams. Internal risk and audit functions. Architecture and corporate approval forums. External stakeholders partners/vendors, regulators and industry schemes.

Responsibilities

• Working in cooperation with Platform, Storage and Collaboration IT teams across the organisation to engineer security controls & further embed security best practices across said environments.
• Investigating and analysing complex technology environments. Understanding current security posture then planning & delivering on the solutions and processes required to bring change and improvement.
• Owning controls related to domain and ensuring they remain effective through-out their lifecycle.
• Remain current with principles, concepts and emerging technologies related to the role.
• Influence vendor roadmaps and functionality in support of LSEG objectives.
• Deliver required outcomes for the security programmes and investments. Help define the delivery outcomes and milestones with the programme teams.
• Develop and own the strategies, architectures, designs, and associated artefacts for the domain area. Technologies have clear roadmaps and lifecycles defined.
• Manage third parties in their deliveries related to the domain area.
  

Technical / job functional knowledge

• Knowledge and experience in Platform, Storage & Collaboration Security. Operating systems platforms includes Windows, Linux, Unix, Mac & Mobile Devices. Network attached storage and storage area networks. Level of knowledge in the domain technology area would be considered an expert in at least two areas of the wide scope.
• Thorough, in depth understanding of End User Compute (EUC) security best practices, both for Physical and Virtual environments.
• Experience with workstation & server management platforms such as SCCM, Intune, Citrix etc.
• Experience managing Endpoint Privilege Management controls.
• Knowledge and experience of cloud delivered SaaS and IaaS services such as M365, secure email gateways, Intune and so on.
• Strong understanding of Windows Server and Active Directory security best practices.
• Experience securing Linux Operating systems is desirable.
• Architecture and engineering of layered control capabilities.
• Adversary Tools, Techniques and Procedures. A deep understanding of TTP's is required.
• Threat Modelling experience.
• Broad technology and security knowledge across non-core domain area.
• Structured and methodical troubleshooting practices for resolving the most complex problems.
• Policies, standards, and security frameworks, NIST, CIS.
• Risk and control, management, monitoring and reporting.
• The role holder works independently and with guidance only in the most complex of situations. The role holder is expected to solve problems with sound judgement and in a way that is aligned to good practice and in the long-term interests of the organisation.
• The role holder is likely to hold one or more of the following security or engineering/architecture specific certifications, CISSP, OSCP, TOGAF, GIAC or those relevant to the role/domain area.

Business and sector expertise

• Experience and knowledge of technology in financial services and/or regulated environments and industry compliance schemes (for example SWIFT) preferred.
• Must have significant experience of working in security focussed roles. Likely will have greater than 5 years full time in security roles as part of a overall career in technology in excess of 10 years focussed predominantly in the domain area for the role. Expected to have direct hands-on experience in some of the domain area technologies

We are looking for intellectually curious people, passionate about the bigger picture of how technology industry is evolving, ready to ask difficult questions and deal with complicated scenarios. If you are creative and a problem solver, this is the place to be as will be supporting you to fast-forward your career.

We maximize each employee's potential through personal development and through a wide range of learning tools both formal and informal. We believe that remunerating our people with competitive salaries and a range of attractive benefits such as:

25 days' holiday per year
1 additional day off for your Birthday
Annual wellness allowance
Share Purchase Plan
Medical Health Insurance
Medical Subscription (preventive medical services)
Dental Coverage
Life insurance
Pillar 3 Private Pension
Meal Vouchers
Flexible Benefits
Bookster
Volunteering Events
Team Buildings

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.

Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.

Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. You will be part of a collaborative and creative culture where we encourage new ideas and are committed to sustainability across our global business. You will experience the critical role we have in helping to re-engineer the financial ecosystem to support and drive sustainable economic growth. Together, we are aiming to achieve this growth by accelerating the just transition to net zero, enabling growth of the green economy and creating inclusive economic opportunity.

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.

Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it's used for, and how it's obtained, your rights and how to contact us as a data subject.

If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.