Senior Cybersecurity Data Scientist & Threat Intel Lead

CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day. Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use.

CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market. Our ambition to make a positive difference starts with our people. Our values – Protect, Improve, Grow – underpin everything that we do at CLS and define and shape a supportive and inclusive working environment in which everyone is encouraged to be open and forward-thinking.

Job purpose: CLS is seeking a highly motivated, self-driven Cybersecurity Data Scientist to join a global threat intelligence team. The role will be in London, UK. The position will report to the Head of Cyber Threat Intelligence and Proactive Cyber Defense and will involve applying advanced statistical analysis, machine learning, and data engineering to identify, detect, and mitigate digital threats. The ideal candidate will be aware of industry trends and frameworks and how they could impact our business, including threat actor groups, their TTPs, intrusion activities. The candidate will work in support of the Cybersecurity Operations, Cyber Threat Intelligence, and Threat Hunting teams. This role will also be responsible for mentoring others on the team.

This position requires someone with an analytical mind, a quick learner, and the ability to create and deliver briefings, propose, and execute program initiatives/improvements, and collaborate with a wide range of key internal and external stakeholders.

Job Description:

• Develop and implement machine learning models (i.e. anomaly detection, classification) to identify patterns indicating malicious activity, malware, or insider threats.
• Clean, normalize, and manage massive datasets from disparate security systems (SIEM, firewalls, endpoints) to make them usable for analysis.
• Analyze historical security data and external threat intelligence to forecast potential attack vectors.
• Present complex technical findings via dashboards to non-technical stakeholders.
• Work with CTI analysts to produce reports for both executive and technical stakeholders and be able to brief all stakeholders.
• Develop and maintain clear documentation of activities, findings, and lessons learned.
• Assess emerging threats against our operational environment and work in partnership with our security teams for detection, mitigation, and remediation efforts.
• Perform trend and correlation of cyber intelligence for recommendation-based countermeasures.
• Support and engage in incident response investigations.
• Review other analysts' work and provide mentorship and guidance.

Experience:

• 5-7+ years of direct cybersecurity related data scientist experience.
• 5+ years of progressive experience in information security (cyber security) field, preferable in Security Operations or Incident Response roles.
• Understanding of intelligence lifecycle and risk management.
• Knowledge of fundamentals of threat actors’ TTP.
• Understanding of IOC validation practices and sources.
• Familiarity with MITRE ATT&CK framework and mapping.
• Excellent interpersonal and relationship management skills.
• Individual contributor whilst also contributing to a small team.
• Self-motivated with ability to work with minimal supervision.

Qualifications/Certifications:

• Bachelor’s Degree in Cybersecurity studies, Intelligence Studies, International Relations, Economics, Computer Science, or related discipline.
• Security certification such as SANS GIAC (or equivalent) ideally GMLE or CERT Applied Data Science for Cybersecurity Professional, or working towards certification (or equivalent), CISSP and Security+.
• High proficiency in Python and SQL.
• Experience with threat intelligence and SOC/CIRT interaction.
• Splunk experience is highly preferred.
• Experience with SIEM, EDR solutions, network monitoring tools, and other cyber security tools.
• Experience with scikit-learn, TensorFlow, or PyTorch.
• Experience with big data frameworks such as Hadoop, Spark, or Kafka.
• Strong knowledge of statistics, probability, and exploratory data analysis.
• Experience with threat intelligence vendors.
• Ability to work on-site at least twice a week in London.

Desired Skills:

Our commitment to employees: We are a small company with a big mandate, so every person is essential to our success. We are also committed to employing and retaining the most talented and dedicated people. What makes us interesting goes beyond our competitive salaries and great benefits. Our work environment is designed around quality outcomes, not output. The FX market would cease to function without our services, and we take pride in being responsible for keeping it running smoothly.

We are different from other financial institutions in that we have a flatter and more transparent structure with accessible leadership. You will be seen, heard and empowered to develop your career. We are a purpose-driven organization, with an inclusive culture that focuses on doing what is right. The well-being of our people is as important to us as the resilience of our systems. In addition to encouraging our people to ‘locate for their day,’ we run a range of initiatives that support employees’ sense of belonging and physical, emotional and mental well-being.

Our extensive benefits for employees typically include:

• Vacation/annual leave: 25 days in UK/Asia + 3 life days, 23 in US + 3 life days.
• Private medical and dental cover and life insurance.
• Generous pension contributions in the UK and Asia; matching 401(k) in the US.
• ‘Locate for your day’ hybrid working – 2 days a week in office.
• Access to Discover – our learning platform with 1000+ courses from LinkedIn Learning.
• Paid parental leave / Coaching and support services.
• ‘Heads down days’ with no meetings on the last Friday of every month.
• Diversity Council / Affinity groups (Women’s Forum, Black Employee Network, Pride Network, Parents & Caregivers Network, Sustainability Network).

Awards: The Sunday Times Best Places to Work 2023 & 2024 / Big Company / The Sunday Times Awards. Third place in Britain’s Healthiest Workplace 2022 / Medium Company / Vitality Awards.