Senior Lead Security Operations Analyst - UK (Cardiff/Edinburgh)

Companies House; Cardiff; On-site; GBP 90,000 - 110,000; Full time

Job summary

Companies House is seeking a Senior Lead Security Operations Specialist to lead the security operations function, protect services, systems and information from cyber threats, and provide technical guidance to the team in a Microsoft/AWS environment.

The role combines hands-on monitoring, investigations and incident response with senior leadership responsibilities and collaboration across engineering teams.

Responsibilities

• Leading security investigations and incident response – owning complex/high‑impact incidents with containment, remediation and escalation.
• Providing technical leadership – senior escalation point, guiding investigations and supporting decision making.
• Developing security monitoring and detection – creating/reviewing/tuning detections to identify threats.
• Managing and improving Microsoft Sentinel and Defender – enhancing monitoring and detection capabilities.
• Monitoring cloud environments – investigating activity across AWS and Azure using security telemetry.
• Improving automation and processes – identifying opportunities to automate security workflows.
• Developing incident response capability – improving procedures, playbooks and escalation processes.
• Developing the team – mentoring analysts and building investigative capability.
• Supporting operational leadership – prioritising/security operations and providing leadership when needed.
• Working across Companies House – collaborating with security, cloud, platform, infra and software teams.
• Advising senior stakeholders – clearly communicating incidents/risks with evidence-based recommendations.
• Driving continuous improvement – staying ahead of threats and evolving security capabilities.

Job description

Companies House is seeking a Senior Lead Security Operations Specialist to lead the security operations function, protect services, systems and information from cyber threats, and provide technical guidance to the team in a Microsoft/AWS environment.

The role combines hands-on monitoring, investigations and incident response with senior leadership responsibilities and collaboration across engineering teams.