Lead Cyber Defence Analyst

About this role

Not quite right? These jobs in Bengaluru match the same skills — apply to a few to improve your chances.

Jr Application Administrator

Kaufman Rossin

In OfficeBengaluru

Apply

Optical and Communication - Sales

Yokogawa

In OfficeBengaluru

Apply

IT Operations Specialist - Communication

Airbus

In OfficeBengaluru

Apply

Secure on-board Communication (SOK)- Lead-2

Embitel Technologies

In OfficeBengaluru

Apply

Skills you'll use

What you'll do

• G Group is a FTSE 100 fintech operating across five continents, serving over 1.4m customers and handling billions of dollars in transactions – built on scale, trust, and proof. We didn't pivot to innovation; it's how we've always operated. What that means for the people who work here is real: genuinely complex problems to solve, the technology and resources to tackle them properly, and the kind of scope that's rare in established businesses.
• The bar is high – bring a curious and forward-thinking mindset and we'll give you the platform to define what comes next.
• Join us at IG – the future gets built here.
• This role sits within our Security Operations Centre (SOC), a 24/7 function responsible for detecting, investigating, and responding to cybersecurity threats across IG Group's global platforms. The team protects our clients, systems, and data through a combination of human expertise, AI-assisted triage, and continuously evolving security automation.
• Your role in the Team's Success
• As a Lead Cyber Defence Analyst (L3), you are accountable for shift operations and serve as the senior technical escalation point for complex and high-severity security incidents. You will drive meaningful improvements to the SOC's detection and response capabilities — designing SIEM rules, building SOAR automation, and leading post-incident reviews that translate lessons learnt into tangible enhancements.
• Beyond the technical, you will play a central role in developing the analysts around you, mentoring L1s and L2s and helping to build a high-performing, continuously improving team. Your leadership during incidents, your visibility across shift workload, and your contribution to strategic SOC development will directly shape IG Group's ability to detect and respond to emerging threats at scale.

Who can apply

• 6+ years of extensive experience in SOC operations and incident response, with a proven ability to lead complex, high-pressure investigations and coordinate across teams.
• Deep technical expertise across SIEM and SOAR platforms, EDR tooling, and threat detection technologies, including hands-on experience building and automating detection logic and playbooks in production environments.
• Demonstrated ability to develop and maintain automated workflows that improve SOC efficiency and reduce analyst toil.
• Strong mentoring and communication skills, with experience coaching analysts at multiple levels and delivering structured learning activities such as tabletop exercises.
• A proactive, improvement-focused mindset — comfortable analysing incident metrics, identifying gaps, and taking ownership of making things better.
• Shift Timings (APAC & EMEA Support Coverage)
• This role requires flexibility to operate within the following primary working windows based on business needs:
• APAC (Primary Working Window)
• India (IST): 08:00 – 17:00
• EMEA (Primary Working Window)

Perks & benefits

About IG Group

Searching for “IG Group jobs” or “jobs at IG Group”? You’re in the right place.