Security Operations DevOps Engineer

Job summary

Pleasenote: Applicants should review all aspects of this advert to ensure a thorough understanding. If reviewing via a screen reader, please note that the Job summary, Job description, Person specification and Things you need to know sections have been emphasised

About The Role

Join Companies House as a Security Operations DevSecOps Engineer and help shape the future of our Security Operations capability.

This is a hands-on engineering role where you'll design, build and automate the cloud infrastructure, tooling and platforms that support our security monitoring and response services. Working across AWS, Azure and Microsoft Sentinel, you'll develop secure, scalable and resilient solutions using Terraform, GitHub, Infrastructure as Code and CI/CD practices.

You'll play a key role in improving automation, integrating security technologies, and enhancing the reliability of our security platforms, enabling the Security Operations team to respond to threats more effectively and independently.

This is an exciting opportunity to take ownership of significant technical challenges while helping to build a modern, engineering-led Security Operations function.

Technical Frameworks

This role aligns with the Government Security Profession Secure Development Framework and the Government Digital and Data (GDaD) DevOps Engineer Capability Framework. Candidates may find these useful when preparing examples for their personal statement and demonstrating relevant technical skills and experience.

• Government Security Profession: Secure Development Framework
  Secure Development - UK Government Security - Beta
• Government Digital and Data Profession: DevOps Engineer Capability Framework
  https://ddat-capability-framework.service.gov.uk/role/development-operations-devops-engineer

About the Team

The Security Operations team plays a critical role in protecting Companies House systems, services and data from cyber threats. We are responsible for monitoring, detecting and responding to security incidents, while continuously improving our security capabilities across a complex multi-cloud environment.

As part of a growing and evolving function, we are building greater in-house engineering capability to enhance our security tooling, automation and monitoring platforms. Working closely with colleagues across Security, Platform Engineering and Digital teams, we develop innovative solutions that strengthen our security posture and support the delivery of secure public services.

This is an exciting opportunity to join a collaborative team where you'll have the freedom to influence how security technology is designed, built and operated, while helping to shape the future of Security Operations at Companies House.

Find out more about what a great place Companies House is to work

Job description

To be eligible for this role you also need to meet our Nationality requirements which are outlined below and also successful candidates must meet the security requirements for Security Clearance (SC) before they can be appointed. To gain (SC) clearance you will need to have been a UK resident for a minimum of 3 years out of the last 5 years. For more details, please refer to the ‘Things you need to know’ section below.

As a Security Operations DevSecOps Engineer, you will:

• Design, build and maintain security infrastructure across AWS and Azure environments.
• Develop and manage Infrastructure as Code solutions using Terraform.
• Build and maintain secure CI/CD pipelines and deployment processes.
• Engineer and support Microsoft Sentinel, including data connectors, integrations and automation.
• Develop integrations and data pipelines that collect, process and route security telemetry.
• Create automated solutions to improve monitoring, investigation and response activities.
• Monitor, maintain and enhance the reliability, resilience and security of security platforms and services.
• Work closely with Security Operations analysts and engineering teams to develop scalable detection and monitoring solutions.
• Take technical ownership of security engineering initiatives and drive continuous improvement across the Security Operations capability.

Please note- Companies House cannot offer Visa sponsorship to candidates through this campaign.

Where will you be working?

You will be aligned to either the Cardiff or Edinburgh office, where you will be expected to attend at least once a week. We are currently using a hybrid approach to the way we work which provides opportunities for you to be adaptable in the way you work so that you can achieve a healthy balance between your work and home life. Your manager will agree regular patterns of attendance with you; however, you may be required to make yourself available to attend the office more frequently when required to meet business needs.

Person specification

What we’re looking for

The successful candidate will be an experienced cloud and security engineer with strong hands-on technical skills and the ability to design, build, automate and maintain security infrastructure across a multi-cloud environment.

Experience

• Strong hands-on experience engineering and supporting Amazon Web Services environments, including cloud infrastructure, security services, logging and integrations.
• Strong practical experience using Terraform and Infrastructure as Code to build, configure and manage cloud infrastructure.
• Strong practical experience using GitHub for source control, versioning, code review and engineering workflows.
• Experience developing and maintaining continuous integration and deployment pipelines using Concourse or comparable deployment technologies.
• Experience working with Microsoft Azure and Microsoft Sentinel, including security monitoring, data ingestion, integrations, configuration and automation.
• Experience developing integrations and automation between cloud platforms and security technologies using scripting, application programming interfaces and automated workflows.
• Experience supporting operational cloud platforms and troubleshooting complex infrastructure, deployment, integration and data pipeline issues.
• Ability to take technical ownership of security engineering problems, design effective solutions and troubleshoot complex issues across cloud infrastructure, deployment pipelines and security platforms.
• Ability to work collaboratively with Security Operations, platform and engineering teams, translating security requirements into reliable, secure, scalable and maintainable technical solutions.

Behaviours

We'll assess you against these behaviours during the selection process:

• Working Together
• Delivering at Pace

Technical skills

We'll assess you against these technical skills during the selection process:

• Strong knowledge of Terraform and Infrastructure as Code, including state management, reusable infrastructure, testing and automated deployment practices. (This will be assessed at Stage 2 of