Senior Cyber Threat Intelligence Analyst (GSOC)

As a CTI Analyst at LSEG, you translate threat intelligence into actionable guidance for Cyber Security and the wider business. You’ll monitor threat actors and TTPs, producing concise intelligence for technical and non-technical audiences. You’ll work across the intelligence lifecycle, drawing on internal telemetry, open-source data, and trusted sharing communities to inform security decisions. The role spans tactical to strategic work, including threat hunting and incident support, within a collaborative, growth-focused security team.

• healthcare
• retirement planning
• paid volunteering days
• wellbeing initiatives

• Research and evaluate cyber threats relevant to LSEG and its global operations
• Track threat actors, campaigns, and evolving TTPs and adjust assessments accordingly
• Produce clear, actionable intelligence for diverse stakeholders
• Apply structured analytic techniques and transparently communicate confidence and gaps
• Work across the intelligence lifecycle to meet consumer requirements and assess impact
• Identify emerging threats and geopolitical developments with potential impact
• Develop hypotheses with threat hunting and detection teams to uncover new activity
• Support cyber incidents with intelligence on adversary behavior and likely next steps
• Translate intelligence into improvements to preventative and detective controls
• Maintain relationships with intelligence consumers, peers, and partners
• Contribute to CTI processes, methodologies, and tooling improvements
• Stay current on threat landscape and deepen expertise

• Solid understanding of the modern cyber threat landscape and adversary behaviors/TTPs
• Demonstrable knowledge of MITRE ATT&CK and its application to CTI
• Understanding of attack pathways, techs, protocols, and security controls in modern enterprises
• Ability to conduct effective open-source research and evaluate sources' reliability
• Ability to communicate sophisticated technical information to technical and non-technical audiences
• Strong written analytical skills and clear communication of uncertainty using appropriate intelligence lexicon
• Curiosity about geopolitical, technological, and criminal developments and their impact on cyber threats

• Intellectual curiosity
• Critical-thinking
• Excellent written and verbal communication
• Scripting or data analysis in Python or PowerShell
• Knowledge of intelligence-sharing standards/tech like STIX/TAXII
• Experience with intelligence-led threat hunting or detection hypotheses