Security Operations DevOps Engineer

Job summary

Pleasenote: Applicants should review all aspects of this advert to ensure a thorough understanding. If reviewing via a screen reader, please note that the Job summary, Job description, Person specification and Things you need to know sections have been emphasised

About The Role

Join Companies House as a Security Operations DevSecOps Engineer and help shape the future of our Security Operations capability.

This is a hands-on engineering role where you'll design, build and automate the cloud infrastructure, tooling and platforms that support our security monitoring and response services. Working across AWS, Azure and Microsoft Sentinel, you'll develop secure, scalable and resilient solutions using Terraform, GitHub, Infrastructure as Code and CI/CD practices.

You'll play a key role in improving automation, integrating security technologies, and enhancing the reliability of our security platforms, enabling the Security Operations team to respond to threats more effectively and independently.

This is an exciting opportunity to take ownership of significant technical challenges while helping to build a modern, engineering-led Security Operations function.

Technical Frameworks

This role aligns with the Government Security Profession Secure Development Framework and the Government Digital and Data (GDaD) DevOps Engineer Capability Framework. Candidates may find these useful when preparing examples for their personal statement and demonstrating relevant technical skills and experience.

• Government Security Profession: Secure Development Framework
  Secure Development - UK Government Security - Beta
• Government Digital and Data Profession: DevOps Engineer Capability Framework
  https://ddat-capability-framework.service.gov.uk/role/development-operations-devops-engineer

About the Team

The Security Operations team plays a critical role in protecting Companies House systems, services and data from cyber threats. We are responsible for monitoring, detecting and responding to security incidents, while continuously improving our security capabilities across a complex multi-cloud environment.

As part of a growing and evolving function, we are building greater in-house engineering capability to enhance our security tooling, automation and monitoring platforms. Working closely with colleagues across Security, Platform Engineering and Digital teams, we develop innovative solutions that strengthen our security posture and support the delivery of secure public services.

This is an exciting opportunity to join a collaborative team where you'll have the freedom to influence how security technology is designed, built and operated, while helping to shape the future of Security Operations at Companies House.

Find out more about what a great place Companies House is to work

Job description

To be eligible for this role you also need to meet our Nationality requirements which are outlined below and also successful candidates must meet the security requirements for Security Clearance (SC) before they can be appointed. To gain (SC) clearance you will need to have been a UK resident for a minimum of 3 years out of the last 5 years. For more details, please refer to the ‘Things you need to know’ section below.

As a Security Operations DevSecOps Engineer, you will:

• Design, build and maintain security infrastructure across AWS and Azure environments.
• Develop and manage Infrastructure as Code solutions using Terraform.
• Build and maintain secure CI/CD pipelines and deployment processes.
• Engineer and support Microsoft Sentinel, including data connectors, integrations and automation.
• Develop integrations and data pipelines that collect, process and route security telemetry.
• Create automated solutions to improve monitoring, investigation and response activities.
• Monitor, maintain and enhance the reliability, resilience and security of security platforms and services.
• Work closely with Security Operations analysts and engineering teams to develop scalable detection and monitoring solutions.
• Take technical ownership of security engineering initiatives and drive continuous improvement across the Security Operations capability.

Please note- Companies House cannot offer Visa sponsorship to candidates through this campaign.

Where will you be working?

You will be aligned to either the Cardiff or Edinburgh office, where you will be expected to attend at least once a week. We are currently using a hybrid approach to the way we work which provides opportunities for you to be adaptable in the way you work so that you can achieve a healthy balance between your work and home life. Your manager will agree regular patterns of attendance with you; however, you may be required to make yourself available to attend the office more frequently when required to meet business needs.

Person specification

What we’re looking for

The successful candidate will be an experienced cloud and security engineer with strong hands-on technical skills and the ability to design, build, automate and maintain security infrastructure across a multi-cloud environment.

Experience

• Strong hands-on experience engineering and supporting Amazon Web Services environments, including cloud infrastructure, security services, logging and integrations.
• Strong practical experience using Terraform and Infrastructure as Code to build, configure and manage cloud infrastructure.
• Strong practical experience using GitHub for source control, versioning, code review and engineering workflows.
• Experience developing and maintaining continuous integration and deployment pipelines using Concourse or comparable deployment technologies.
• Experience working with Microsoft Azure and Microsoft Sentinel, including security monitoring, data ingestion, integrations, configuration and automation.
• Experience developing integrations and automation between cloud platforms and security technologies using scripting, application programming interfaces and automated workflows.
• Experience supporting operational cloud platforms and troubleshooting complex infrastructure, deployment, integration and data pipeline issues.
• Ability to take technical ownership of security engineering problems, design effective solutions and troubleshoot complex issues across cloud infrastructure, deployment pipelines and security platforms.
• Ability to work collaboratively with Security Operations, platform and engineering teams, translating security requirements into reliable, secure, scalable and maintainable technical solutions.

Behaviours

We'll assess you against these behaviours during the selection process:

• Working Together
• Delivering at Pace

Technical skills

We'll assess you against these technical skills during the selection process:

• Strong knowledge of Terraform and Infrastructure as Code, including state management, reusable infrastructure, testing and automated deployment practices. (This will be assessed at Stage 2 of the selection process)
• Strong knowledge of GitHub and modern source control and deployment practices. (This will be assessed at Stage 2 of the selection process)
• Strong understanding of cloud and DevSecOps engineering principles, including secrets management, access control, testing, change management, deployment resilience, rollback and recovery. (This will be assessed at Stage 2 of the selection process)
• Strong knowledge of Amazon Web Services architecture and security, including identity and access management, logging, monitoring and security services. (This will be assessed at Stage 3 of the selection process)
• Good working knowledge of Concourse or equivalent continuous integration and deployment technologies, including secure and resilient pipeline design. (This will be assessed at Stage 3 of the selection process)
• Good knowledge of Microsoft Azure and Microsoft Sentinel, including security monitoring architecture, data connectors, integrations and automation. (This will be assessed at Stage 3 of the selection process)
• Practical scripting and automation skills using Python, PowerShell, Bash or equivalent technologies. (This will be assessed at Stage 3 of the selection process)
• Understanding of security telemetry and the engineering required to reliably collect, process and route security data across cloud and security platforms. (This will be assessed at Stage 3 of the selection process)

Benefits

Alongside your salary of £62,881, Companies House contributes £18,216 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

We believe that our success is driven by the well-being and satisfaction of our team members at all levels of the organisation. At Companies House we’re committed to providing a comprehensive benefits package that goes beyond the ordinary, ensuring your career journey with us is not only fulfilling, but also rewarding. We pride ourselves on offering a quality work-life balance with our employee wellbeing being central to our working practices.

We offer a comprehensive range of benefits designed to support your wellbeing, professional development and financial security, including:

• Flexible working arrangements, with no core hours and working patterns available between 6am and 8pm.
• Hybrid working opportunities, helping you balance office collaboration with home working.
• 30 days annual leave, plus bank holidays, increasing with service.
• Civil Service Pension Scheme, with an average employer contribution of 28%.
• A strong commitment to learning, development and career progression.
• Access to wellbeing support, resources and initiatives that promote positive physical and mental health.
• A collaborative and inclusive working environment where colleagues are encouraged to bring their whole selves to work.

Head to Our benefits - Working for us - Recruitment (companieshouse.gov.uk) to find out more about the fantastic benefits package we have at Companies House.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.

Additional details on security and vetting

Successful candidates must meet the security requirements for Security Check (SC) before they can be appointed. Further information on the vetting process can be found at National security vetting: clearance levels - GOV.UK.

To be eligible for SC clearance, candidates must meet the vetting criteria and have been a resident in the UK for at least 3 out of the last 5 years. Failure to meet the residency requirements will result in your security clearance application being rejected.

Please review our vetting charter to understand what you can expect from the process - The vetting charter - GOV.UK

If you have questions regarding this or are unsure if you meet the eligibility criteria, please contact recruitmentch@companieshouse.gov.uk

What will the process look like?

Communications will be electronic via email therefore it is important that you check your Civil Service Jobs account regularly, as well as your spam/junk email folder.

We welcome applications in Welsh / Rydym yn croesawi ceisiadau yn y Gymraeg.

Key Dates:(dates are indicative only and could be subject to change)

• Closing date: 28th September 2026.
• Sift/shortlist: W/C 29th September 2026.
• Technical Assessment: W/C 13th October 2026.
• Interviews: W/C 26th October 2026.

Stage 1– Sift

An initial sift of applications will be carried out to create a shortlist. This will be based on the evidence provided for the Experience Success Profile listed below.

We’re committed to being diverse and inclusive, so please make your application anonymous by removing all identifying personal information (such as your name and age) from your personal statement. This also applies to your employment history, this means excluding names of schools, or any personal identifiers.

Experience

Your CV will be used to assess your suitability for the role alongside your 1250-word Personal statement.

In your application form we’d like you to:

CV

• Tell us about your employment history that evidences working within an Intel Environment, including key responsibilities and achievements.

Personal statement

Tell us why you’re a great fit for this role by writing a 1250 word personal statement that highlights your relevant experience, skills, and motivations.

As part of the assessment process, we’ll be reviewing your statement for clear evidence of how you meet the criteria outlined below:

• Strong hands-on experience engineering and supporting Amazon Web Services environments, including cloud infrastructure, security services, logging and integrations.
• Strong practical experience using Terraform and Infrastructure as Code to build, configure and manage cloud infrastructure.
• Strong practical experience using GitHub for source control, versioning, code review and engineering workflows.
• Experience developing and maintaining continuous integration and deployment pipelines using Concourse or comparable deployment technologies.
• Experience developing integrations and automation between cloud platforms and security technologies using scripting, application programming interfaces and automated workflows.

For guidance on how to structure your application please visit:About the application process , Civil Service Careers.

You can use examples from school, work, volunteering, or other experiences. It is advisable to give clear examples for each criteria listed above, including the impact of your actions, ideally utilising the STAR technique (Situation, Task, Action, Result) with most detail on what you did and the outcome. Please use this link as guidance How to write your PS , Civil Service Careers.

Please note:

• In the event of a high volume of applications, an initial sift may be conducted against the Lead Criteria: Experience developing and maintaining continuous integration and deployment pipelines using Concourse or comparable deployment technologies.
• If you pass the initial sift (lead criteria), you may either move on to a full sift (full personal statement) or go straight to interview, depending on number of applications received.
• We may raise the score required at sift stage to progress to interview if we receive a high number of applications.

Stage2- Technical Assessment

Candidates successful at sift will be invited to complete a technical assessment, where they will present or demonstrate a relevant example of their work. This will allow us to explore their technical approach, decision-making and personal contribution to delivering solutions in a cloud-based environment.

Specific information regarding the Technical Skills that will be assessed at the assessment will be contained within the assessment invitation.

Stage3- Interviews

If invited to interview Behaviours and Technical Skillbased questioning will be used.

Further details will be provided to candidates invited to interview.

Interviews for this role will be carried out virtually via Microsoft Teams.

Stage 4- offer

Once all interviews have been completed, you will be notified of the outcome by email. Offers will be made in strict merit order to the highest scoring candidate first as outlined in the Civil Service Commissioners’ Recruitment Principles.

Reserve list
This recruitment campaign will keep a reserve list for 12 months. If you meet the requirements for this role but aren't offered after passing the interview, you'll be placed on the reserve list. Subject to business need, if a suitable position opens up during this time, we will reach out to individuals in merit order. Successful applicants will be required to start on the date offered to align with the training schedule. Those who are unable to start on that date or are unavailable for certain parts of the training period will be placed on the reserve list for consideration in a future intake.

This post is being advertised to Internal, AcrossGovernment and External candidates at the same time.

Incomplete and/or late submissions will not be accepted or considered. Feedback will only be provided if you attend an interview or assessment.

If you require a reasonable adjustment at any stage of the recruitment process, or if you'd like to discuss any person-centred adjustments then please let the recruitment team know viarecruitmentch@companieshouse.gov.uk

We Celebrate Diversity

As an equal opportunity employer, we celebrate diversity, being committed to ensuring we’re representative of the citizens we serve and creating an inclusive environment. Everyone in Companies House brings something different, and so will you. To fulfil our commitment to recruiting and attracting diverse talent we welcome applications from underrepresented groups. We also welcome applications from Welsh speakers.

We are proud to be a disability confident leader. Our recruitment process is fully inclusive and we can make adjustments as needed through our process. These could include having an interview buddy, extra time at interviews/assessments and receiving interview questions in advance, to name a few.

If you require any reasonable adjustments at application stage, or if you'd like to discuss any person-centred adjustments, please contact us by emailing recruitmentCH@companieshouse.gov.uk.

Read our 'Applying under the Disability Confidence Scheme (DCS)' guide to find out how to successfully complete an application under the Disability Confidence Scheme (DCS).

Pre-Employment Checking

In line with Government guidance, successfully appointed candidates will need to provide documents for our Right to Work checks.

From June 2026, applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). Your personal details (name, National Insurance number, and date of birth) will be checked against the Civil Service Resourcing Extract IFD.

This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued.

If your details appear on this database, you will not be offered employment unless you can demonstrate exceptional circumstances. Companies House, acting on behalf of the vacancy holder, will inform you if your application is refused for this reason.

Please note: You are not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a basic (or equivalent) criminal record check.Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window).People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see theCivil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction. Read more about prison leaver recruitment (opens in new window).Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

• Name : Luke Andrews
• Email : landrews@companieshouse.gov.uk

Recruitment team

• Email : recruitmentch@companieshouse.gov.uk

Further information

Commissioners statement

The Civil Service recruits by merit on the basis of fair and open competition as outlined in the Civil Service Commission’s https://civilservicecommission.independent.gov.uk/document/02a-recruitm….

Complaints Procedure:

If you feel your application has not been treated in accordance with the Recruitment Principles and you wish to make a complaint, you should contact infopoint@companieshouse.gov.uk in the first instance.

If you are not satisfied with the response you receive from the Department, contact the Civil Service Commission at:

Email: info@csc.gov.uk

Address:
Civil Service Commission,
Room G/8,
1 Horse Guards Road
SW1A 2HQ

Please use the following link to visit the Civil Service Commission Recruitment Complaints page for further information.

https://civilservicecommission.independent.gov.uk/contact/

Share this page

• Print
• Email
• Gmail
• Facebook
• LinkedIn