Security Automation Manager

Who you are

• Demonstrable experience designing, implementing, and supporting Security Orchestration, Automation and Response (SOAR) platforms and associated automation workflows
• Experience mentoring, coaching, and developing engineers, fostering an inclusive, collaborative, and high-performing team culture
• Strong hands-on scripting and development experience, particularly with Python including API integrations and workflow automation
• Experience building and maintaining security capabilities in public cloud environments, with practical expertise in AWS and/or Microsoft Azure
• Knowledge of modern DevSecOps practices, including Infrastructure-as-Code, source control, CI/CD pipelines, automated testing, and configuration management
• Experience managing and supporting enterprise security platforms
• Understanding of security operations processes, including alert triage, investigation, and incident response
• Experience evaluating and implementing Artificial Intelligence (AI) capabilities within operational environments, including familiarity with Large Language Models (LLMs), Generative AI, AI agents, and Retrieval-Augmented Generation (RAG) concepts
• Strong knowledge of system integration techniques, REST APIs, authentication mechanisms, and alert-driven architectures
• Experience translating business and operational requirements into scalable technical solutions
• Strong analytical and problem-solving skills, capable of leading complex technical investigations and drive resolution of critical issues
• Excellent communication skills, including the ability to present technical concepts to both technical and non-technical audiences

What the job involves

• As Manager, Security Automation, you’ll be a core member of the LSEG Cyber Security Operations team. You’ll lead and set the direction for the Cyber Security Automation team which delivers across a number of areas:
• Automation - Lead the design and delivery of security automation capabilities, being responsible for alert ingestion, enrichment, and automated response workflows that drive efficient, consistent handling of security alerts
• Case Management - Own and evolve the security case management platform, ensuring effective support for Security Operations and Security Fusion Centre teams while driving process improvements, workflow optimisation, and service excellence
• DevSecOps - Manage the infrastructure and engineering practices that underpin automation, forensics, and threat intelligence platforms, ensuring secure, resilient, and scalable operations with all configurations and content managed through Infrastructure-as-Code and DevOps principles
• AI - Drive the adoption of emerging AI capabilities across security operations, leveraging machine learning, generative AI, agentic workflows, and Retrieval-Augmented Generation (RAG) to enhance analysis, automate decision-making, and accelerate security response
• As the successful candidate, you will combine strong hands-on technical expertise with the ability to provide strategic leadership. You will be comfortable contributing directly to engineering challenges while also setting direction and driving innovation aligned to business objectives
• Lead the design, development, and continuous improvement of security automation capabilities
• Define and implement automation use cases, reducing manual effort and accelerating response and remediation activities
• Own and evolve the security case management platform, ensuring it meets the operational needs of stakeholders
• Manage the infrastructure, platforms, and engineering practices that underpin security automation
• Champion Infrastructure-as-Code, Configuration-as-Code, and DevSecOps principles, ensuring platform configurations, integrations, and content are version-controlled, tested, and deployed through repeatable processes
• Drive the use of emerging AI capabilities across security operations to enhance analysis, automate decision-making, and accelerate response activities
• Develop and maintain a multi-year automation strategy and roadmap
• Define and track performance metrics, benchmarks, and service health indicators for continuous improvement
• Lead technical investigations and problem-solving activities for complex platform, integration, and automation challenges
• Ensure security, compliance, resilience, and audit requirements are embedded throughout platform design, engineering, and operational processes
• Provide line management, leadership, and direction for a team of security automation engineers, creating an inclusive high-performing and collaborative team culture
• Coach, mentor, and develop team members through regular feedback, career development planning, knowledge sharing, and technical leadership
• Act as a senior technical leader and domain expert, balancing hands-on engineering contributions with strategic planning, partner engagement, and organisational leadership