LSEG
Manager, DevSecOps, Digital
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About LSEG
London Stock Exchange Group (LSEG) is a prominent global provider of financial markets infrastructure and data, based in London, England. With operations in over 65 countries, LSEG serves more than 44,000 customers across 170+ countries. The company owns significant assets, including the London Stock Exchange, Refinitiv, FTSE Russell, and LCH, and employs over 26,000 people. LSEG offers a wide range of solutions in financial data, analytics, infrastructure, and technology. Its services include data and analytics for investment and trading decisions, indices for asset allocation and performance analysis, and a comprehensive suite for foreign exchange trading. The company also provides risk management tools, post-trade solutions, and advanced trading systems for various financial institutions. LSEG plays a crucial role in supporting financial stability and economic growth by partnering with clients throughout the trade lifecycle.
Security at LSEG
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- LSEG's AppSec mission is to "operate and expand an Application Security Programme"and to "empower product teams by seamlessly integrating Application Security solutions into their development workflows."The company emphasizes developer enablement, aiming to integrate security into development workflows.
- Their risk philosophy involves a "global cyber information security team, led by our Chief Information Security Officer."Stated goals include "analysing security scan results, validating findings, eliminating false positives"and achieving "automated security testing at scale.".
Security Team
The "Architecture team reports into the Group CISO."Sabrina Feng is identified as "Chief Risk Officer, Technology, Cyber and Resilience, LSEG plc."However, no public, verbatim evidence was found for a named Head of Application Security or AppSec manager.
Key Initiatives
Information on a Security Champions program is "not publicly available."LSEG references a "Shift Left"strategy and "integrating Application Security solutions into their development workflows."Their vulnerability management process involves "analysing security scan results, validating findings, eliminating false positives,"and delivering cyber security controls aligned to the "NIST framework."Recent initiatives include "Active hiring for Senior Application Security Engineer (posted) emphasizing scaling automated security testing."No public evidence was found detailing exact vulnerability SLAs, MTTR, or ticketing workflows.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.