Senior Security Operations Engineer

Company Description

Netcompany is one of the fastest growing technology companies in the UK, recognised for disrupting the marketplace and helping to transform the IT sector. We deliver IT Transformation and Delivery services to some of the most well‑known organisations in the UK and can count 18% of the FTSE 100 as clients, delivering services across several different sectors.

Netcompany have ambitious growth plans for the next few years and will continue to win and deliver multi‑million‑pound projects, offering a fantastic opportunity for all members of staff to grow with us and carve out a challenging, successful and rewarding career.

At Netcompany, we help organisations strengthen their digital resilience through smart, secure, and sustainable solutions. We are looking for a Senior Security Operations Engineer to support a UK Government client by strengthening security monitoring and incident response across an AWS environment running Netcompany Platforms
.

In this role, you will help shape the monitoring strategy, improve detection and response processes, and work closely with technical teams to manage security incidents effectively in a highly secure environment.

As a Senior Security Operations Engineer, you will take responsibility for driving the monitoring roadmap, supporting security operations, and ensuring that alert triage, incident investigation, and escalation processes are effective and continuously improved.

This is very much a hands‑on role. You will work across and with the infrastructure and application teams within an AWS‑based platform environment, providing expert guidance during containment, eradication, and recovery activities. You will also help design and enable automated monitoring processes and recommend tools and techniques to improve threat detection and response.

This role requires SC-level security clearance and the ability to work within a secure UK government environment.

• Manage the implementation of the monitoring roadmap
• Support the development of the monitoring strategy, ensuring alignment with security requirements, policies, and standards
• Monitor, triage, and investigate security alerts across protective monitoring platforms
• Review security event data to identify incidents and support appropriate escalation
• Lead and support the design and enablement of automated monitoring processes
• Recommend and implement SIEM and network analysis tools, techniques, and procedures
• Drive continuous improvement through dashboard monitoring and retrospective analysis
• Support incident response activities, including containment, eradication, recovery, and reporting
• Work closely with infrastructure teams on:
  • network isolation
  • IAM revocation
  • security group changes
  • snapshot creation
  • IaC‑driven rebuilds
  • restoration from clean backups
• Work closely with application teams on:
  • disabling affected features
  • revoking application sessions
  • rolling back deployments
  • restoring application components
• Ensure operational blockers are escalated quickly to the Incident Response Manager
• Support security operations within an AWS environment and across Infrastructure as Code (IaC)-managed infrastructure

• Experience in security operations, monitoring, or incident response
• Strong knowledge of SIEM platforms and security alert triage
• Experience analysing security event data and supporting incident escalation
• Familiarity with AWS security services, controls, and operational practices
• Experience working with Infrastructure as Code (IaC) tools and approaches
• Understanding of monitoring automation and detection engineering
• Hands‑on experience with containment, eradication, and recovery activities
• Ability to collaborate effectively with infrastructure and application teams
• Strong communication skills and the ability to guide technical stakeholders
• A proactive mindset with a focus on continuous improvement
• Willingness and ability to obtain and maintain SC security clearance

• Experience leading small monitoring or security operations teams
• Familiarity with cloud security operations and IAM controls in AWS
• Knowledge of IaC recovery approaches and secure rebuild patterns
• Experience…