Security Operations Engineer

lseg; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

London Stock Exchange Group in Bengaluru is seeking a Security Operations data engineer to transform raw security data into actionable insights, building scalable analytics and reporting capabilities.

You will work with SIEM, SOAR, APIs and enterprise reporting tools to design dashboards, automate workflows and improve collaboration across Cyber Security, Physical Security and Financial Crime.

Qualifications

• Experience in cyber security, engineering or analytics, gained through education or professional practice.
• Experience with Splunk or another enterprise SIEM, including searching, dashboards and reporting.

Responsibilities

• Engineer and improve how Security Operations collects, processes and uses information.
• Develop dashboards, reports, integrations and SOAR workflows to reduce manual effort.

Skills

Cyber security

Engineering

Analytics

Tools

Splunk

Job description

At London Stock Exchange Group, we deliver critical financial markets infrastructure and data services in a highly regulated, technology-led environment. Our Security Operations teams protect that environment through monitoring, incident response, intelligence, engineering, automation and operational insight.

Security Operations & Fusion Management is expanding its engineering capability to improve how operational information is collected, analysed, automated and reported. We are looking for someone who enjoys solving problems with data and technology and can transform complex information into meaningful insight and measurable improvements.

This role sits at the intersection of engineering, automation, analytics and reporting. The position is responsible for retrieving, manipulating and analysing large and complex datasets from across the security estate, transforming raw information into trends, trends into insight and insight into actions that improve operational effectiveness, decision-making and risk management.

The role also supports the continued evolution of the Security Fusion Centre, helping multiple security disciplines work more effectively through shared platforms, automation, data and reporting. Working alongside stakeholders from Cyber Security, Physical Security, Social Media Intelligence, Financial Crime and other functions, the successful candidate will help identify opportunities, shape requirements and support the delivery of capabilities that improve collaboration, visibility and operational outcomes.

Working with technologies such as SIEM, SOAR, APIs, automation platforms and enterprise reporting tools, this role is responsible for developing dashboards, reporting products, integrations and SOAR workflows that reduce manual effort, improve visibility and provide stakeholders with trusted, actionable information.

What you will help us do

Engineer and improve operational capability.

Help design, build and enhance solutions that improve how Security Operations and the Security Fusion Centre collect, process and use information. Responsibilities include integrating platforms, onboarding new data sources, automating manual activities and developing scalable solutions that improve operational effectiveness across the Group.

Working across SIEM, SOAR, APIs, automation platforms and enterprise reporting tools, the role supports the integration of people, processes and technology through reliable and well-engineered solutions.

Transform data into insight.

Work with large and complex datasets from across the security estate, using tools such as Splunk, Excel and other analytics platforms to identify trends, understand performance and uncover opportunities for improvement.

Reporting, automation and operational capabilities will be developed to improve visibility of performance, highlight opportunities for optimisation and support informed decision-making. Success in the role requires the ability to move confidently from data, to trends, to insight and ultimately to action.

Enable Security Fusion operations.

Support the continued evolution of the Security Fusion Centre by enabling multiple security disciplines to work more effectively through shared platforms, automation, reporting and data-driven decision-making.

Close partnership with stakeholders across Cyber Security, Physical Security, Social Media Intelligence, Financial Crime and other operational teams is central to the role, helping to shape requirements and deliver capabilities, in partnership with the Automation & Analytics team, that improve collaboration, visibility and operational outcomes across SOAR and SIEM platforms.

Deliver solutions that people use.

Work directly with stakeholders to understand challenges, shape requirements and develop practical solutions that address genuine business needs.

The role contributes to the creation of trusted, scalable and intuitive dashboards, workflows, reporting products, integrations and automations aligned with Group technology, security and engineering standards.

Take ownership and drive continuous improvement.

Take responsibility for assigned deliverables and workstreams, managing activity through discovery, design, build, testing and implementation whilst working collaboratively with colleagues across Security Operations and Technology.

We value individuals who are proactive, curious and improvement-focused. A culture of continuous improvement encourages challenge of inefficient processes, identification of automation and analytics opportunities, and innovation through data, engineering, automation and AI.

What we are looking for

Core experience

• Experience in cyber security, engineering, technology, analytics, computer science or a related discipline, gained through education, professional experience or equivalent practical application.
• Experience working with Splunk or another enterprise SIEM platform, including searching, reporting, dashboards and operational analysis.