Lead Security Analyst

About Deutsche Börse Group:

Headquartered in Frankfurt, Germany, we are an international exchange organization and one of the world's leading market infrastructure providers. We empower investors, financial institutions, and companies by providing access to global capital markets. Our business covers the full spectrum of financial market services, including trading, clearing, settlement and custody, digital assets and crypto, market analytics, data, software, and SaaS. As a technology-driven company, we develop state-of-the-art IT solutions and offer IT systems all over the world.

About Deutsche Börse Group in India:

Our Global Capability Centre located in Hyderabad serves as a key strategic hub, bringing together India's top-tier tech talent. We focus on crafting advanced IT solutions that elevate market infrastructure and services. As capital market engineers, we are the backbone of financial markets worldwide. We harness the power of innovation with leading state-of-the-art IT solutions to build trust in the markets of today and tomorrow.

Lead Security Analyst - Network & Infrastructure

Division:

• Deutsche Börse AG, Chief Information Officer/Chief Operating Officer (CIO/COO), Chief Technology Officer (CTO), Plan & Control

Field of activity

• The Deutsche Börse CTO develops and runs the groupwide Information Technology (IT) infrastructure, develops and operates innovative IT products and offers services to the rest of the Group upon which they can build. The CTO area plays a significant role in the achieving the Group's strategic goals by leading transformation and supporting a stable operating environment.
• The Transformation Office unit supplies reliable project management capabilities and information security management to the CTO and enables the other delivery units within the area to rollout IS compliance requirements and Group IS strategy.
• The successful candidate will join the Information Security, Risk & Regulatory unit and support in carrying out these responsibilities.

Tasks / Responsibilities:

Technical Security Assessments:

• Perform in-depth technical reviews of network and infrastructure components (firewalls, routers, switches, servers, cloud services).
• Analyse configurations for compliance with security baselines (e.g., CIS Benchmarks, vendor hardening guides).
• Interpret scan results to identify misconfigurations and weaknesses.

Security Baseline Review & Enforcement:

• Review technical security baselines for operating systems, network devices, and cloud services.
• Work with central team to develop custom scripts (e.g., Python, PowerShell) or automation tools to validate compliance with baselines and detect deviations.

Infrastructure Security Architecture:

• Review and advise on secure design of network topologies, segmentation, and access control models.
• Evaluate cloud infrastructure (Azure, GCP) for secure deployment practices, Network access, IAM policies, encryption, and logging.

Qualifications / required skills:

• Bachelor's or Master's degree in Information Security, Computer Science, or related field.
• 5-8 years of hands-on experience in infrastructure and network security.
• Technical proficiency in IT systems including operating systems, and network architectures.
• Strong technical knowledge of TCP/IP, DNS, VPNs, firewalls, IDS/IPS, Linux/Windows hardening, and cloud security controls.
• Experience with tools like Wireshark, Nmap, Nessus, Rapid7, Solarwinds, Terraform, Ansible, and cloud-native security services.
• Certifications such as CISSP, CCSP, OSCP, Google/Azure cloud Security Specialty.
• Excellent analytical and critical thinking skills, with strong problem solving spirit
• Collaborative, flexible and well organized
• Clear oral and written communication skills. Proficiency in written and spoken English.