Lead Software Engineer, Cyber Security Controls Automation

About the role

LSEG (London Stock Exchange Group) is looking for a Lead Software Engineer to join its Cyber Security Engineering team. The role helps reinvent Governance, Risk and Compliance by turning cyber security controls, risk data and audit evidence into software, automation and real-time assurance. You will design, build and maintain data-driven capabilities that support the operation, monitoring and evidencing of security defences, working closely with security engineers, control owners and risk teams.

Key responsibilities

• Build software and automation for control monitoring, testing, reporting and evidence collection
• Develop command line tools, APIs, integrations and workflows that simplify assurance activity
• Integrate with security platforms, risk systems, cloud services, SIEM, vulnerability management, IAM, EDR and other engineering tools
• Develop repeatable evidence generation processes for audits, regulatory reviews, customer assessments and compliance activities
• Use data to identify control gaps, weaknesses, trends and risk exposure, and turn technical control activity into auditable evidence and reporting
• Improve control design, implementation, measurement and documentation, and give technical feedback through code and design review
• Support standards and policy documentation, including policy-as-code approaches, and promote automation and data-led assurance across the team

Required profile

• Commercial experience with Rust, TypeScript, Python, Go and JavaScript
• Experience building command line tools and giving feedback to engineering teams through code review
• Ability to explain technical concepts clearly to engineers, risk teams, auditors and senior stakeholders
• Helpful: understanding of cyber security, control testing and risk management, regulated environment experience, consulting experience, standards or policy-as-code writing, and automation of control testing or continuous control monitoring

Required skills

• Working knowledge of web-based systems and REST APIs
• Knowledge of algorithms and data structures for large volumes of data
• Strong software engineering fundamentals: testing, version control, maintainability, documentation and secure coding
• Experience with structured and unstructured data