Security Operations DevOps Engineer

Join Companies House as a Security Operations DevSecOps Engineer and help shape the future of our Security Operations capability.

This is a hands-on engineering role where you’ll design, build and automate the cloud infrastructure, tooling and platforms that support our security monitoring and response services. Working across AWS, Azure and Microsoft Sentinel, you’ll develop secure, scalable and resilient solutions using Terraform, GitHub, Infrastructure as Code and CI/CD practices.

You’ll play a key role in improving automation, integrating security technologies, and enhancing the reliability of our security platforms, enabling the Security Operations team to respond to threats more effectively and independently.

This is an exciting opportunity to take ownership of significant technical challenges while helping to build a modern, engineering-led Security Operations function.

Technical Frameworks

This role aligns with the Government Security Profession Secure Development Framework and the Government Digital and Data (GDaD) DevOps Engineer Capability Framework. Candidates may find these useful when preparing examples for their personal statement and demonstrating relevant technical skills and experience.

• Government Security Profession: Secure Development Framework Secure Development - UK Government Security - Beta

• Government Digital and Data Profession: DevOps Engineer Capability Framework https://ddat-capability-framework.service.gov.uk/role/development-operations-devops-engineer

About the Team

The Security Operations team plays a critical role in protecting Companies House systems, services and data from cyber threats. We are responsible for monitoring, detecting and responding to security incidents, while continuously improving our security capabilities across a complex multi-cloud environment.

As part of a growing and evolving function, we are building greater in-house engineering capability to enhance our security tooling, automation and monitoring platforms. Working closely with colleagues across Security, Platform Engineering and Digital teams, we develop innovative solutions that strengthen our security posture and support the delivery of secure public services.

This is an exciting opportunity to join a collaborative team where you’ll have the freedom to influence how security technology is designed, built and operated, while helping to shape the future of Security Operations at Companies House., As a Security Operations DevSecOps Engineer, you will:

• Design, build and maintain security infrastructure across AWS and Azure environments.
• Develop and manage Infrastructure as Code solutions using Terraform.
• Build and maintain secure CI/CD pipelines and deployment processes.
• Engineer and support Microsoft Sentinel, including data connectors, integrations and automation.
• Develop integrations and data pipelines that collect, process and route security telemetry.
• Create automated solutions to improve monitoring, investigation and response activities.
• Monitor, maintain and enhance the reliability, resilience and security of security platforms and services.
• Work closely with Security Operations analysts and engineering teams to develop scalable detection and monitoring solutions.
• Take technical ownership of security engineering initiatives and drive continuous improvement across the Security Operations capability.

Please note - Companies House cannot offer Visa sponsorship to candidates through this campaign., You will be aligned to either the Cardiff or Edinburgh office, where you will be expected to attend at least once a week. We are currently using a hybrid approach to the way we work which provides opportunities for you to be adaptable in the way you work so that you can achieve a healthy balance between your work and home life. Your manager will agree regular patterns of attendance with you; however, you may be required to make yourself available to attend the office more frequently when required to meet business needs., This recruitment campaign will keep a reserve list for 12 months. If you meet the requirements for this role but aren’t offered after passing the interview, you’ll be placed on the reserve list. Subject to business need, if a suitable position opens up during this time, we will reach out to individuals in merit order. Successful applicants will be required to start on the date offered to align with the training schedule. Those who are unable to start on that date or are unavailable for certain parts of the training period will be placed on the reserve list for consideration in a future intake.

This post is being advertised to Internal, Across Government and External candidates at the same time.

Incomplete and/or late submissions will not be accepted or considered. Feedback will only be provided if you attend an interview or assessment.

If you require a reasonable adjustment at any stage of the recruitment process, or if you’d like to discuss any person-centred adjustments then please let the recruitment team know via; recruitmentch@companieshouse.gov.uk

We Celebrate Diversity

As an equal opportunity employer, we celebrate diversity, being committed to ensuring we’re representative of the citizens we serve and creating an inclusive environment. Everyone in Companies House brings something different, and so will you. To fulfil our commitment to recruiting and attracting diverse talent we welcome applications from underrepresented groups. We also welcome applications from Welsh speakers.

We are proud to be a disability confident leader. Our recruitment process is fully inclusive and we can make adjustments as needed through our process. These could include having an interview buddy, extra time at interviews/assessments and receiving interview questions in advance, to name a few.

If you require any reasonable adjustments at application stage, or if you’d like to discuss any person-centred adjustments, please contact us by emailing recruitmentCH@companieshouse.gov.uk.

Read our ‘Applying under the Disability Confidence Scheme (DCS)’ guide to find out how to successfully complete an application under the Disability Confidence Scheme (DCS).

Pre-Employment Checking

In line with Government guidance, successfully appointed candidates will need to provide documents for our Right to Work checks.

From June 2026, applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). Your personal details (name, National Insurance number, and date of birth) will be checked against the Civil Service Resourcing Extract IFD.

This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued.

If your details appear on this database, you will not be offered employment unless you can demonstrate exceptional circumstances. Companies House, acting on behalf of the vacancy holder, will inform you if your application is refused for this reason.

Please note: You are not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government. Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a basic (or equivalent) criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check .

See our vetting charter . People working with government assets must complete baseline personnel security standard (opens in new window) checks., * UK nationals

• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

To be eligible for this role you also need to meet our Nationality requirements which are outlined below and also successful candidates must meet the security requirements for Security Clearance (SC) before they can be appointed. To gain (SC) clearance you will need to have been a UK resident for a minimum of 3 years out of the last 5 years. For more details, please refer to the ‘Things you need to know’ section below., The successful candidate will be an experienced cloud and security engineer with strong hands-on technical skills and the ability to design, build, automate and maintain security infrastructure across a multi-cloud environment., * Strong hands-on experience engineering and supporting Amazon Web Services environments, including cloud infrastructure, security services, logging and integrations.

• Strong practical experience using Terraform and Infrastructure as Code to build, configure and manage cloud infrastructure.
• Strong practical experience using GitHub for source control, versioning, code review and engineering workflows.
• Experience developing and maintaining continuous integration and deployment pipelines using Concourse or comparable deployment technologies.
• Experience working with Microsoft Azure and Microsoft Sentinel, including security monitoring, data ingestion, integrations, configuration and automation.
• Experience developing integrations and automation between cloud platforms and security technologies using scripting, application programming interfaces and automated workflows.
• Experience supporting operational cloud platforms and troubleshooting complex infrastructure, deployment, integration and data pipeline issues.
• Ability to take technical ownership of security engineering problems, design effective solutions and troubleshoot complex issues across cloud infrastructure, deployment pipelines and security platforms.
• Ability to work collaboratively with Security Operations, platform and engineering teams, translating security requirements into reliable, secure, scalable and maintainable technical solutions., We’ll assess you against these behaviours during the selection process:
• Working Together
• Delivering at Pace

Technical skills

We’ll assess you against these technical skills during the selection process:

• Strong knowledge of Terraform and Infrastructure as Code, including state management, reusable infrastructure, testing and automated deployment practices. (This will be assessed at Stage 2 of the selection process)
• Strong knowledge of GitHub and modern source control and deployment practices. (This will be assessed at Stage 2 of the selection process)
• Strong understanding of cloud and DevSecOps engineering principles, including secrets management, access control, testing, change management, deployment resilience, rollback and recovery. (This will be assessed at Stage 2 of the selection process)
• Strong knowledge of Amazon Web Services architecture and security, including identity and access management, logging, monitoring and security services. (This will be assessed at Stage 3 of the selection process)
• Good working knowledge of Concourse or equivalent continuous integration and deployment technologies, including secure and resilient pipeline design. (This will be assessed at Stage 3 of the selection process)
• Good knowledge of Microsoft Azure and Microsoft Sentinel, including security monitoring architecture, data connectors, integrations and automation. (This will be assessed at Stage 3 of the selection process)
• Practical scripting and automation skills using Python, PowerShell, Bash or equivalent technologies. (This will be assessed at Stage 3 of the selection process)
• Understanding of security telemetry and the engineering required to reliably collect, process and route security data across cloud and security platforms. (This will be assessed at Stage 3 of the selection process), This vacancy is using Success Profiles , and will assess your Behaviours, Experience and Technical skills., To be eligible for SC clearance, candidates must meet the vetting criteria and have been a resident in the UK for at least 3 out of the last 5 years. Failure to meet the residency requirements will result in your security clearance application being rejected., Tell us why you’re a great fit for this role by writing a 1250 word personal statement that highlights your relevant experience, skills, and motivations.

As part of the assessment process, we’ll be reviewing your statement for clear evidence of how you meet the criteria outlined below:

• Strong hands-on experience engineering and supporting Amazon Web Services environments, including cloud infrastructure, security services, logging and integrations.
• Strong practical experience using Terraform and Infrastructure as Code to build, configure and manage cloud infrastructure.
• Strong practical experience using GitHub for source control, versioning, code review and engineering workflows.
• Experience developing and maintaining continuous integration and deployment pipelines using Concourse or comparable deployment technologies.
• Experience developing integrations and automation between cloud platforms and security technologies using scripting, application programming interfaces and automated workflows.

For guidance on how to structure your application please visit: About the application process , Civil Service Careers.

You can use examples from school, work, volunteering, or other experiences. It is advisable to give clear examples for each criteria listed above, including the impact of your actions, ideally utilising the STAR technique (Situation, Task, Action, Result) with most detail on what you did and the outcome. Please use this link as guidance How to write your PS , Civil Service Careers.

£62,881 - £76,136 The base salary band is £58,531 - £65,136 per year with an additional DDaT allowance of £4350 - £11000 available. The final salary and allowance awarded will be based on an assessment of your skills and experience as demonstrated at interview.

All our roles come with an excellent benefits’ package, including the generous Civil Service Pension Scheme. Further salary increases depend entirely upon the outcome of our annual pay negotiation with central government. If you are a current Civil Servant transferring to us, your salary will be discussed in line with our pay policies. A Civil Service Pension with an employer contribution of 28.97% GBP, Alongside your salary of £62,881, Companies House contributes £18,216 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides .

We believe that our success is driven by the well-being and satisfaction of our team members at all levels of the organisation. At Companies House we’re committed to providing a comprehensive benefits package that goes beyond the ordinary, ensuring your career journey with us is not only fulfilling, but also rewarding. We pride ourselves on offering a quality work-life balance with our employee wellbeing being central to our working practices.

We offer a comprehensive range of benefits designed to support your wellbeing, professional development and financial security, including:

• Flexible working arrangements, with no core hours and working patterns available between 6am and 8pm.
• Hybrid working opportunities, helping you balance office collaboration with home working.
• 30 days annual leave, plus bank holidays, increasing with service.
• Civil Service Pension Scheme, with an average employer contribution of 28%.
• A strong commitment to learning, development and career progression.
• Access to wellbeing support, resources and initiatives that promote positive physical and mental health.
• A collaborative and inclusive working environment where colleagues are encouraged to bring their whole selves to work.

Head to Our benefits - Working for us - Recruitment (companieshouse.gov.uk) to find out more about the fantastic benefits package we have at Companies House.