Overview
In this London-anchored senior role, you will design and operate AI-assisted automation services for Jefferies’ Global Information Security function, delivering production-grade AI workflows across security domains. You’ll own end-to-end automation supporting security operations and partner with pillar leads to scale AI across identity, access, network, cloud, and data protection. The role combines hands-on engineering with cross-region impact, shaping a global automation roadmap and guardrails. You will work with cross-functional teams to drive tangible improvements in efficiency, tempo, and security outcomes.
Responsibilities
- Design, implement and run AI-assisted automation services as production offerings with testing, monitoring, alerts, and rollback
- Deliver automation for security operations tasks such as alert triage, case summarisation, evidence collection, and threat analysis
- Collaborate with pillar leads to deliver AI/automation across domains (identity, privileged access, network, data protection, vulnerability prioritisation)
- Develop LLM and agent-based workflows integrated with SIEM, EDR, SOAR, IGA, PAM, CSPM, DLP, ticketing and threat intel platforms via APIs
- Set the global AI Security and automation roadmap in partnership with senior leads and arbitrate demand across domains
- Establish engineering standards for AI tooling, including prompt/tool definitions, permissions, and output validation
- Build reusable platform components and patterns to scale capability across teams
- Define and report metrics on efficiency, cycle time, quality and error rates
- Mentor engineers in the Pune capability centre as automation scales
- Ensure guardrails: least-privilege identities, human-in-the-loop, audit logging, and defense against prompt injection and tool poisoning
Key requirements
- 8+ years of professional software engineering with production ownership
- Advanced Python (async, API integration, automated testing, CI/CD)
- Production experience building LLM-backed or agentic systems (retrieval, tool calling, orchestration, evaluation)
- Working knowledge of security operations tooling (SIEM, EDR, SOAR, case management, threat intel)
- Familiarity with at least two security domains (IAM, privileged access, network/cloud security, data protection) and ability to learn new domains quickly
- Cloud engineering experience (AWS or Azure), containerisation and infrastructure-as-code
- Secure development practices (secrets management, least-privilege identities, input validation, output encoding)
- Experience delivering across multiple time zones for distributed stakeholders
- autonomy and technical ownership
- strong collaboration across regional teams
- ability to balance competing domain demands
- Python (asynchronous), API integration, automated testing, CI/CD
- LLM-backed/agentic systems (retrieval, tool and function calling, orchestration)
- SIEM, EDR, SOAR, IGA, PAM, CSPM, DLP integration
…
