Security Operations Analyst

Moog is a performance culture that empowers people to achieve great things. Below covers everything you need to know about what this opportunity entails, as well as what is expected from applicants. Our people enjoy solving interesting technical challenges in a culture where everyone trusts each other to do the right thing.

For you, working with us can mean deeper job satisfaction, better rewards, and a great quality of life inside and outside of work. Job Title: Security Operations AnalystReporting To: Head, IT SectionWork Schedule: Hybrid – Tewkesbury, GBRMoog's Corporate Group is seeking a Security Operations Analyst to support activities at our Tewkesbury site!

As a Security Operations Analyst, you will be responsible for supporting and monitoring Moog's cybersecurity operations. In this role, we expect you to be a cybersecurity professional who monitors security alerts, investigates security incidents, conducts risk assessments, implements security controls, and contributes to the development of security policies & procedures.

This position will be located at the Moog facility in Tewkesbury, UK with a focus on the EASA Part-IS regulations. To be considered for the Security Operations Analyst role, here's what you'll need to bring with you: Typically, a bachelor's degree in information security, Information Technology, Computer Science or related field preferred.

More than three years' experience in Security with more than five years working in an IT administration role. Experience should also include one to three years working with the following security tools and technologies: EDR / XDR platforms or Endpoint Security technologies SIEM platformsEmail Security PlatformsPrivileged Account ManagementVulnerability ManagementStrong understanding of enterprise security architecture design, security concepts, principles, and technologies.

Ability to effectively prioritize and execute tasks in a high-pressure environment. Ability to conduct research and log analysis into IT security issues and products as required. Demonstrated communication skills with both technical and non-technical audiences.

Understanding of security policies, standards, and procedures. Incumbent must have flexible availability, as non-traditional work hours will be required, based on business need. It would also be beneficial if you had: One or more of the following (or similar) relevant industry-recognized security certifications: CompTIA Security+ or Security XCertified Ethical HackerGIAC Security Essentials CertificationISACA Certified Information Security ManagerMicrosoft Certified Systems Engineer: Security(ISC)2 CC, SCCP, CISSP, ISSAP, or ISSEPExperience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 & 171, ISO, etc.

Familiarity with scripting languages (e.g., Python)Working experience with MITRE ATT&CK and Cyber Kill Chain frameworksProven analytical and problem-solving abilitiesOver one (1) year of experience working with the following security tools and technologies: Vulnerability Management PlatformsCloud Platforms & Security (Azure, AWS, or GCP)Attack Surface Management PlatformsEndpoint encryptionAs the Security Operations Analyst,

you will

Act as the designated EASA Part-IS lead in Tewkesbury. Operates and maintains the EASA Part-IS-compliant ISMS in Tewkesbury. Monitor and analyze security events, identify vulnerabilities, and develop strategies to address security incidents.

Conduct vulnerability assessments, risk analysis, and security audits to identify weaknesses in systems and processes. Coordinates cyber security risks that could affect aviation safety in Tewkesbury. Serves as the primary interface for EASA Part-IS in CAG Tewkesbury with EASA regulators and auditors.

Coordinates and aligns efforts with other EASA Part-IS leads in other regions to reduce duplication. Follow, prepare, design, and test security incident response procedures and playbooks. Document, prioritize, and formally report incidents, root cause analyses, and after-action reviews.

Deploy, manage and maintain all security systems and their corresponding or associated software, including endpoint security software, intrusion detection systems, cryptography systems, and privileged account management software.

Participant in and \ or lead the implementation of security controls, tools, and infrastructure to protect systems and data. Experience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 & 171, ISO, etc.

Must be onsite 75% at Tewkesbury. Travel to other Moog locations in Wolverhampton and Dublin, IRE will be required several times a year. How We Care forYouFlexible benefits package and development opportunities to support career progression33 days annual leave (including bank holidays)Private medical insurance, mental health support and financial adviceGenerous life assurance and company pension contribution (from 6%)Employee share options, free onsite parking, EV charging and gym facilitiesSummaryLocation: Tewkesbury, GBRType: Full time

Report this job