IT Security Specialist

Corporate culture and guiding principles:

TP ICAP is a global firm of professional intermediaries that plays a pivotal role in the world’s

financial, energy and commodities markets.

Operating through our core businesses, Tullett Prebon, ICAP, PVM, Coex, Mirexa Capital, Tullett Prebon Information, ICAP Information Services and PVM Data Services, we create strong networks in person and through technology. We provide comprehensive analysis and insight into market conditions and long-term trends. We combine data, knowledge and intelligence into contextual insight and commercial guidance. By engaging with our clients, and providing innovative products and services, we enable our clients to transact with confidence, facilitating the flow of capital and commodities around the world, enhancing investment and contributing to economic growth.

We are known in the market for our Honesty, Integrity and Excellence in the provision of service to our clients. Above all else, we Respect our clients and each other, without bias. Employees are expected to uphold the values and principles of our cultural framework in performance of their job duties.

Job duties:

This role sits within the Global IT Security department and operates as a global team responsible for cyber security at TP ICAP.

The Security Specialist has the remit of proactively driving development of the cyber security capability in line with the evolving threat landscape. This includes; vulnerability management, access control, security platform engineering, detection and response activities. There are also opportunities for involvement with offensive security, architecture and design.

The role requires a self-starter, capable of taking the initiative either as part of a group or working independently. An ability to problem solve through solutions engineering to deliver defined objectives is essential. This requires ingenuity and resourcefulness to achieve cyber security orientated goals, that also facilitate our business needs. Personal career development is strongly supported, especially where directly applicable to ongoing workstreams.

Overall, the Security Specialist is required to have a willingness to learn and adapt, in order to accomplish outcomes that improve the overall cyber security posture of the group. Fundamental to this is the ability to exercise an offensive security mindset.

Risk Responsibilities

Ensure that you understand the risks and controls on your department; what could go wrong, what controls you have to prevent/detect or contain these.

All staff have defined risk management responsibilities. The Group imposes additional responsibilities on line-managers and senior managers. It is critical that all staff discharge their risk management responsibilities when undertaking their role. Specific responsibilities are incorporated into employee objectives, and your performance against these objectives will be assessed as part of the firm’s performance management process. You will also be required to confirm that you have discharged your risk management responsibilities through the annual risk management attestation process.

Job Duties:

Maintain knowledge of current ATP TTPs
Security platform engineering and projects
Vulnerability identification and remediation
SOC support as point of escalation
Penetration test report remediation
Privileged access management
Red/Purple offensive security activities
Incident response and forensics

General Skills:

• Strong communication skills

• Comprehensive cyber security knowledge

• Project management & organizational skills

• Ability to interpret and analyse technical information

• Attention to detail and data accuracy

Essential Technical Skills:

· Experience with vulnerability management, SIEM, PAM, IDS/IPS, EDR, DLP and AV platforms

· Comfortable with Windows and Linux operating systems

· Solid knowledge of networking, active directory and web applications

· Experience with Cloud technologies

· Base level ability to code in any language

Desirable Technical Skills:

· Incident response and forensics

· Offensive security experience

· Degree level accreditation or equivalent experience

· OSCP, CEH or SANS certification