Security Operations Engineer

Enable Security Fusion Operations

• Support the evolution of the Security Fusion Centre through shared platforms, automation, reporting, and data-driven decision-making.
• Work with Cyber Security, Physical Security, Social Media Intelligence, Financial Crime, and other operational teams.
• Shape requirements and deliver capabilities that improve collaboration, visibility, and operational outcomes across SOAR and SIEM platforms.

Deliver Solutions and Improvements

• Understand stakeholder challenges, shape requirements, and develop practical solutions for genuine business needs.
• Create trusted dashboards, workflows, reporting products, integrations, and automations aligned with Group standards.
• Manage assigned deliverables through discovery, design, build, testing, and implementation.
• Identify inefficient processes and opportunities for automation, analytics, and AI.

Core Experience

• Experience in cybersecurity, engineering, technology, analytics, computer science, or a related discipline through education, professional experience, or equivalent practical application.
• Experience with Splunk or another enterprise SIEM platform, including searching, reporting, dashboards, and operational analysis.
• Experience analysing complex datasets with Excel, Splunk, SQL, Power BI, or similar tools.
• Ability to translate technical and operational data into trends, insight, recommendations, and action.
• Familiarity with SOAR platforms, workflow automation, APIs, case management, or system integrations.
• Ability to develop automation, integration, and data-processing scripts or code using Python, PowerShell, JavaScript, or similar languages.
• Experience gathering requirements and contributing to practical technical solutions.
• Strong communication, initiative, ownership, curiosity, and collaboration skills.

Useful but Not Essential

• Experience with Splunk Enterprise Security, Tines, Cortex XSOAR, Swimlane, or similar technologies.
• Experience in security operations, threat intelligence, fusion centres, fraud, physical security, resilience, or risk functions.
• Experience supporting data-driven operational, regulatory, or management reporting.
• Knowledge of cloud platforms, enterprise integration patterns, or data engineering concepts.
• Experience developing automation, AI-enabled workflows, or analytics solutions.
• Understanding of version control, testing, and deployment processes.
• Relevant certifications from Splunk, Microsoft, ISC2, CompTIA, SANS, or Palo Alto Networks are useful but not essential.

Success Measures

About LSEG