Detection, Engineering and Automation Manager

Technology function across FIL is responsible for all global aspects of Technology, Digital, Cybersecurity, and Innovation. Fidelity is a value-driven, customer-obsessed organization and in Technology we are fortunate to play a direct role in helping our clients with one of the most important aspects of their lives - their financial well-being. Within the Technology function is our Global Cyber & Information Security (GCIS) that operates enterprise security services and controls.

These are designed to mitigate Cyber and Information Security risks ensuring that Fidelity's business operates securely. The Technical Cybersecurity teams monitor both the internal and external threat environment, responding to security alerts and events in close to real time, as well as providing security assurance and access management services across the enterprise technology and business environment. Our global innovative Cyber Defence Operations team sits within GCIS and provides proactive, cutting-edge solutions to protect clients' digital assets and infrastructure against evolving cyber threats.

The Detection Engineering & Automation team within our Global Cybersecurity Operations focuses on the development of automated detection capabilities to reduce manual effort of the Global Cybersecurity Operations team freeing up time to focus on real cyber threats. They ensure that security controls are performing effectively and efficiently and that they are feeding into automation technologies allowing the organisation to make intelligent correlated decisions.

The Detection, Automation and Engineering Manager plays a pivotal role in supporting the Global Cybersecurity Operations team by ensuring security tooling implemented in the organisation are working as intended. The ideal candidate will be responsible for driving excellence and innovation across the team and have extensive knowledge and experience in technologies including, but are not limited to, SIEM Administration (logging, use-case development, resource utilisation and optimisation), SOAR, DDoS, IPS, Email security, Network Anomaly Detection.

The ideal candidate has experience of not only using a wide range of technologies to respond to security events, but also supporting ongoing maintenance of the tools. The Detection, Automation and Engineering Manager will be responsible to:

• Lead and manage a global high performing Detection, Automation and Engineering service.
• Lead and oversee the development of new security detection use-cases and associated workflows within automation to address emerging threats and vulnerabilities; ensuring robust QA, QC and Change Management is followed and maintained.
• Lead and own team delivery reporting, detailing key metrics, incidents, and trends for stakeholders, enabling informed decision-making following set formats.
• Drive engineering maturity by designing and implementing CI/CD pipelines to standardise, automate, and improve the quality, velocity, and reliability of detection and automation releases.
• Own and govern delivery prioritisation, ensuring sprint planning and team output align to the function roadmap, business priorities, and risk-based value delivery.
• Contribute to and influence roadmap development by identifying engineering opportunities, tooling enhancements, and future-state capabilities that strengthen the function's strategic direction.
• Lead and oversee the maintenance and management of security solutions / services like Sentinel, Defender, Service Now, Proofpoint, etc.
• Regularly assess the effectiveness of security tools through metrics and key performance indicators, driving continuous improvement initiatives within the team.
• Identify and implement enhancement opportunities with existing tooling to capitalise investments and returns.
• Guide, upskill and mentor a high performing team, fostering a collaborative and innovative environment to maximize productivity and skill development.
• Collaborate with cross-functional teams and Security Architects to ensure alignment of security tooling initiatives with broader organizational goals and compliance requirements.
• Lead the implementation of robust security…