Manager, Security Automation

About this role

About Us

LSEG (London Stock Exchange Group) is more than a diversified global financial markets infrastructure and data business. We are dedicated, open-access partners with a dedication to excellence in delivering the services our customers expect from us. With extensive experience, deep knowledge and worldwide presence across financial markets, we enable businesses and economies around the world to fund innovation, manage risk and create jobs. It’s how we’ve contributed to supporting the financial stability and growth of communities and economies globally for more than 300 years. Through a comprehensive suite of trusted financial market infrastructure services – and our open-access model – we provide the flexibility, stability and trust that enable our customers to pursue their ambitions with confidence and clarity.

LSEG is headquartered in the United Kingdom, with significant operations in 70 countries across EMEA, North America, Latin America and Asia Pacific. We employ 25,000 people globally, more than half located in Asia Pacific. LSEG’s ticker symbol is LSEG.

Our People

People are at the heart of what we do and drive the success of our business. Our culture of connecting, creating opportunity and delivering excellence shape how we think, how we do things and how we help our people fulfil their potential. We embrace diversity and actively seek to attract individuals with unique backgrounds and perspectives. We break down barriers and encourage teamwork, enabling innovation and rapid development of solutions that make a difference. Our workplace generates an enriching and rewarding experience for our people and customers alike. Our vision is to build an inclusive culture in which everyone feels encouraged to fulfil their potential.

We know that real personal growth cannot be achieved by simply climbing a career ladder – which is why we encourage and enable a wealth of avenues and interesting opportunities for everyone to broaden and deepen their skills and expertise. As a global organisation spanning 70 countries and one rooted in a culture of growth, opportunity, diversity and innovation, LSEG is a place where everyone can grow, develop and fulfil your potential with meaningful careers.

Role Purpose

As Manager, Security Automation, you’ll be a core member of the LSEG Cyber Security Operations team. You’ll lead and set the direction for the Cyber Security Automation team which delivers across a number of areas:

• Automation - Lead the design and delivery of security automation capabilities, being responsible for alert ingestion, enrichment, and automated response workflows that drive efficient, consistent handling of security alerts.
• Case Management - Own and evolve the security case management platform, ensuring effective support for Security Operations and Security Fusion Centre teams while driving process improvements, workflow optimisation, and service excellence.
• DevSecOps - Manage the infrastructure and engineering practices that underpin automation, forensics, and threat intelligence platforms, ensuring secure, resilient, and scalable operations with all configurations and content managed through Infrastructure-as-Code and DevOps principles.
• AI - Drive the adoption of emerging AI capabilities across security operations, leveraging machine learning, generative AI, agentic workflows, and Retrieval-Augmented Generation (RAG) to enhance analysis, automate decision-making, and accelerate security response.

As the successful candidate, you will combine strong hands-on technical expertise with the ability to provide strategic leadership. You will be comfortable contributing directly to engineering challenges while also setting direction and driving innovation aligned to business objectives. As an inclusive and supportive leader, you will foster a collaborative team culture, mentor and develop colleagues at all stages of their careers, and empower individuals to achieve their full potential while delivering transformational outcomes.

Role Responsibilities

• Lead the design, development, and continuous improvement of security automation capabilities.
• Define and implement automation use cases, reducing manual effort and accelerating response and remediation activities.
• Own and evolve the security case management platform, ensuring it meets the operational needs of stakeholders.
• Manage the infrastructure, platforms, and engineering practices that underpin security automation.
• Champion Infrastructure-as-Code, Configuration-as-Code, and DevSecOps principles, ensuring platform configurations, integrations, and content are version-controlled, tested, and deployed through repeatable processes.
• Drive the use of emerging AI capabilities across security operations to enhance analysis, automate decision-making, and accelerate response activities.
• Develop and maintain a multi-year automation strategy and roadmap.
• Define and track performance metrics, benchmarks, and service health indicators for continuous improvement.
• Lead technical investigations and problem-solving activities for complex platform, integration, and automation challenges.
• Ensure security, compliance, resilience, and audit requirements are embedded throughout platform design, engineering, and operational processes.
• Provide line management, leadership, and direction for a team of security automation engineers, creating an inclusive high-performing and collaborative team culture.
• Coach, mentor, and develop team members through regular feedback, career development planning, knowledge sharing, and technical leadership.
• Act as a senior technical leader and domain expert, balancing hands-on engineering contributions with strategic planning, partner engagement, and organisational leadership.

Minimum Requirements

• Demonstrable experience designing, implementing, and supporting Security Orchestration, Automation and Response (SOAR) platforms and associated automation workflows.
• Experience mentoring, coaching, and developing engineers, fostering an inclusive, collaborative, and high-performing team culture.
• Strong hands-on scripting and development experience, particularly with Python including API integrations and workflow automation.
• Experience building and maintaining security capabilities in public cloud environments, with practical expertise in AWS and/or Microsoft Azure.
• Knowledge of modern DevSecOps practices, including Infrastructure-as-Code, source control, CI/CD pipelines, automated testing, and configuration management.
• Experience managing and supporting enterprise security platforms.
• Understanding of security operations processes, including alert triage, investigation, and incident response.
• Experience evaluating and implementing Artificial Intelligence (AI) capabilities within operational environments, including familiarity with Large Language Models (LLMs), Generative AI, AI agents, and Retrieval-Augmented Generation (RAG) concepts.
• Strong knowledge of system integration techniques, REST APIs, authentication mechanisms, and alert-driven architectures.
• Experience translating business and operational requirements into scalable technical solutions.
• Strong analytical and problem-solving skills, capable of leading complex technical investigations and drive resolution of critical issues.
• Excellent communication skills, including the ability to present technical concepts to both technical and non-technical audiences.

Career Stage

Manager

London Stock Exchange Group (LSEG) Information

Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.

Our purpose is the foundation on which our culture is built.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.