{"id":2817259,"url":"https://alion.io/job/london-stock-exchange-group-security-operations-engineer","title":"Security Operations Engineer","company":{"id":5734,"name":"London Stock Exchange Group","domain":"lseg.com","url":"https://alion.io/company/lseg","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":160,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colombo, Sri Lanka","India"],"countries":["LK","IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"JavaScript","optional":false},{"name":"Power BI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"Tines","optional":false},{"name":"Prometheus","optional":true}],"status":"closed","first_seen_at":"2026-09-04T00:00:00Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-10-25T18:07:02Z","board_verified":false,"closed_at":"2026-10-25T18:07:02Z","days_open":51,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":51},"description":"At London Stock Exchange Group, we deliver critical financial markets infrastructure and data services in a highly regulated, technology-led environment. Our Security Operations teams protect that environment through monitoring, incident response, intelligence, engineering, automation and operational insight.\nSecurity Operations & Fusion Management is expanding its engineering capability to improve how operational information is collected, analysed, automated and reported. We are looking for someone who enjoys solving problems with data and technology and can transform complex information into meaningful insight and measurable improvements.\nThis role sits at the intersection of engineering, automation, analytics and reporting. The position is responsible for retrieving, manipulating and analysing large and complex datasets from across the security estate, transforming raw information into trends, trends into insight and insight into actions that improve operational effectiveness, decision-making and risk management.\nThe role also supports the continued evolution of the Security Fusion Centre, helping multiple security disciplines work more effectively through shared platforms, automation, data and reporting. Working alongside stakeholders from Cyber Security, Physical Security, Social Media Intelligence, Financial Crime and other functions, the successful candidate will help identify opportunities, shape requirements and support the delivery of capabilities that improve collaboration, visibility and operational outcomes.\nWorking with technologies such as SIEM, SOAR, APIs, automation platforms and enterprise reporting tools, this role is responsible for developing dashboards, reporting products, integrations and SOAR workflows that reduce manual effort, improve visibility and provide stakeholders with trusted, actionable information.\nWhat you will help us do\nEngineer and improve operational capability\nHelp design, build and enhance solutions that improve how Security Operations and the Security Fusion Centre collect, process and use information. Responsibilities include integrating platforms, onboarding new data sources, automating manual activities and developing scalable solutions that improve operational effectiveness across the Group.\nWorking across SIEM, SOAR, APIs, automation platforms and enterprise reporting tools, the role supports the integration of people, processes and technology through reliable and well-engineered solutions.\nTransform data into insight\nWork with large and complex datasets from across the security estate, using tools such as Splunk, Excel and other analytics platforms to identify trends, understand performance and uncover opportunities for improvement.\nReporting, automation and operational capabilities will be developed to improve visibility of performance, highlight opportunities for optimisation and support informed decision-making. Success in the role requires the ability to move confidently from data, to trends, to insight and ultimately to action.\nEnable Security Fusion operations\nSupport the continued evolution of the Security Fusion Centre by enabling multiple security disciplines to work more effectively through shared platforms, automation, reporting and data-driven decision-making.\nClose partnership with stakeholders across Cyber Security, Physical Security, Social Media Intelligence, Financial Crime and other operational teams is central to the role, helping to shape requirements and deliver capabilities, in partnership with the Automation & Analytics team, that improve collaboration, visibility and operational outcomes across SOAR and SIEM platforms.\nDeliver solutions that people use\nWork directly with stakeholders to understand challenges, shape requirements and develop practical solutions that address genuine business needs.\nThe role contributes to the creation of trusted, scalable and intuitive dashboards, workflows, reporting products, integrations and automations aligned with Group technology, security and engineering standards.\nTake ownership and drive continuous improvement\nTake responsibility for assigned deliverables and workstreams, managing activity through discovery, design, build, testing and implementation whilst working collaboratively with colleagues across Security Operations and Technology.\nWe value individuals who are proactive, curious and improvement-focused. A culture of continuous improvement encourages challenge of inefficient processes, identification of automation and analytics opportunities, and innovation through data, engineering, automation and AI.\nWhat we are looking for\nCore experience\nExperience in cyber security, engineering, technology, analytics, computer science or a related discipline, gained through education, professional experience or equivalent practical application.\nExperience working with Splunk or another enterprise SIEM platform, including searching, reporting, dashboards and operational analysis.\nExperience retrieving, manipulating and analysing large or complex datasets using technologies such as Excel, Splunk, SQL, Power BI or similar tools.\nAbility to interpret technical and operational data, identify meaningful trends and translate findings into actionable insight and recommendations.\nFamiliarity with SOAR platforms, workflow automation, APIs, case management solutions or system integrations.\nAbility to develop scripts or code using Python, PowerShell, JavaScript or similar languages to support automation, integration and data processing.\nExperience gathering requirements, understanding operational challenges and contributing to practical technical solutions.\nStrong verbal and written communication skills, with the ability to explain complex technical concepts clearly to both technical and non-technical audiences.\nDemonstrated initiative, curiosity and a willingness to take ownership of outcomes and continuous improvement opportunities.\nA collaborative mindset and ability to work effectively across multiple teams and disciplines.\nUseful but not essential\nExperience with Splunk Enterprise Security, Tines, Cortex XSOAR, Swimlane or similar technologies.\nExperience within Security Operations, Threat Intelligence, Fusion Centres, Fraud, Physical Security, Resilience or Risk functions.\nExperience supporting data-driven operational, regulatory or management reporting.\nKnowledge of cloud platforms, enterprise integration patterns or data engineering concepts.\nExperience developing automation, AI-enabled workflows or analytics solutions.\nUnderstanding of software engineering practices including version control, testing and deployment processes.\nRelevant certifications from providers such as Splunk, Microsoft, ISC2, CompTIA, SANS or Palo Alto Networks.\nWhat success looks like\nSuccess in this role means delivering measurable improvements to how Security Operations uses technology, data, automation and insight.\nSuccess will be measured through the delivery of trusted reporting, scalable solutions and meaningful operational insight that improve decision-making, reduce manual effort and increase visibility across the organisation.\nStrong ownership, accountability and a proactive approach to improving processes, platforms and ways of working are key indicators of success. Through innovation, collaboration and engineering excellence, the role contributes to strengthening the capability and effectiveness of both Security Operations and the wider Security Fusion Centre.\nWe're proud to have been recognised as a Great Place to Work® in India ‘25\nCareer Stage:\nAssociateLondon Stock Exchange Group (LSEG) Information:\nJoin us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.\nLSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.\nOur purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.\nWorking with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.\nWe are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.\nYou will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.\nLSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.\nPlease take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.\nIf you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.","description_format":"text","description_chars":10139,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Paid volunteering days","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Providers & Datasets","Security Operations","Stock Exchanges & Market Infrastructure","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-18T14:28:24Z"},{"event":"close","at":"2026-10-25T18:07:02Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/london-stock-exchange-group-security-operations-engineer","json_url":"https://alion.io/job/london-stock-exchange-group-security-operations-engineer.json","meta":{"generated_at":"2026-10-26T02:43:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3575,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5734},"rest":"https://alion.io/mcp/rest/get_company?id=5734"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flondon-stock-exchange-group-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flondon-stock-exchange-group-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flondon-stock-exchange-group-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/london-stock-exchange-group-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flondon-stock-exchange-group-security-operations-engineer"}]}