Manager, Security Automation & Engineering

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed. The Security Automation & Engineering role is part of the Group Information Security & Privacy department. The team designs, implements, and maintains the platforms used to monitor security events, detect suspicious activities, and support incident response. In support of the Global Security Operations Centre (GSOC), the role focuses on maintaining the availability, performance, and operational resilience of security monitoring platforms. It is also responsible for ensuring the quality and completeness of security event data, as well as the effectiveness of detective controls. This is a technical role that works closely with the GSOC and Local Business Unit (LBU) Business Information Security Office (BISO) teams to integrate security data and maintain the quality of event correlation and detection. The role requires strong technical and problem-solving skills to coordinate with business units, support platform users, work with technology vendors, and respond effectively to evolving security and operational requirements.

Platform Operations and Availability Maintain the availability, performance, and functionality of the Splunk security monitoring platform on a 24/7 basis. Monitor the health and performance of security platforms, data pipelines, and log ingestion processes. Develop and maintain monitoring alerts to promptly identify faults, delays, or disruptions in log collection and correlation. Investigate platform issues and take appropriate action to restore services within the required service levels. Proactively identify data quality, configuration, and architectural issues that may affect threat detection or introduce security and operational risks. Log Integration and Data Quality Identify, map, model, onboard, and correlate event logs from platforms and systems supporting Regional IT Security use cases. Ensure security event data is complete, accurate, timely, and suitable for monitoring, detection, investigation, and reporting. Support the integration of new log sources and security technologies into the monitoring platform. Perform data validation and troubleshooting to resolve issues affecting log collection, parsing, normalisation, enrichment, and correlation. Support data modelling and analytics activities and research new methods to improve data quality and detection capabilities. Detection Engineering and Security Monitoring Develop, maintain, and enhance security monitoring use cases, correlation rules, dashboards, alerts, and detective controls. Work closely with security analysts to identify, investigate, remediate, and close potential security threats. Review the effectiveness of monitoring controls and recommend technical improvements where required. Maintain and enhance threat intelligence data feeds and their integration with security monitoring and correlation processes. Develop dashboards and controls supporting IT security oversight, control monitoring, assurance, and reporting requirements. Automation and Engineering Develop scripts, automation, and technical solutions to improve the efficiency, consistency, and reliability of security operations. Identify recurring operational activities that can be automated or standardised. Support the evaluation, proof of concept, implementation, and rollout of security technologies used by the GSOC and LBU BISO teams. Contribute to initiatives involving Security Orchestration, Automation and Response (SOAR), metrics assurance, and related security capabilities. Proactively