Security Operations Analyst

Moog is a performance culture that empowers people to achieve great things. Our people enjoy solving interesting technical challenges in a culture where everyone trusts each other to do the right thing. For you, working with us can mean deeper job satisfaction, better rewards, and a great quality of life inside and outside of work.

Job Title :

Security Operations Analyst

Reporting To:

Head, IT Section

Work Schedule:

• Hybrid – Tewkesbury, GBR
• Moog's Corporate Group is seeking a Security Operations Analyst to support activities at our Tewkesbury site!

As a Security Operations Analys t, you will be responsible for supporting and monitoring Moog’s cybersecurity operations. In this role, we expect you to be a cybersecurity professional who monitors security alerts, investigates security incidents, conducts risk assessments, implements security controls, and contributes to the development of security policies & procedures. This position will be located at the Moog facility in Tewkesbury, UK with a focus on the EASA Part-IS regulations.

To be considered for the Security Operations Analyst role, here's what you'll need to bring with you:

• •Typically, a bachelor’s degree in information security, Information Technology, Computer Science or related field preferred.
• •More than three years’ experience in Security with more than five years working in an IT administration role.
• •Experience should also include one to three years working with the following security tools and technologies:
• •EDR / XDR platforms or Endpoint Security technologies
• •SIEM platforms
• •Email Security Platforms
• •Privileged Account Management
• •Vulnerability Management

• •Strong understanding of enterprise security architecture design, security concepts, principles, and technologies.
• •Ability to effectively prioritize and execute tasks in a high-pressure environment.
• •Ability to conduct research and log analysis into IT security issues and products as required.
• •Demonstrated communication skills with both technical and non-technical audiences.
• •Understanding of security policies, standards, and procedures.
• •Incumbent must have flexible availability, as non-traditional work hours will be required, based on business need.

It would also be beneficial if you had:

• •One or more of the following (or similar) relevant industry-recognized security certifications:
• •CompTIA Security+ or Security X
• •Certified Ethical Hacker
• •GIAC Security Essentials Certification
• •ISACA Certified Information Security Manager
• •Microsoft Certified Systems Engineer: Security
• •(ISC)2 CC, SCCP, CISSP, ISSAP, or ISSEP

• •Experience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 & 171, ISO, etc.
• •Familiarity with scripting languages (e.g., Python)
• •Working experience with MITRE ATT&CK and Cyber Kill Chain frameworks
• •Proven analytical and problem-solving abilities
• •Over one (1) year of experience working with the following security tools and technologies:
• •Vulnerability Management Platforms
• •Cloud Platforms & Security (Azure, AWS, or GCP)
• •Attack Surface Management Platforms
• •Endpoint encryption

As the Security Operations Analyst, you will:

• •Act as the designated EASA Part-IS lead in Tewkesbury.
• •Operates and maintains the EASA Part-IS-compliant ISMS in Tewkesbury.
• •Monitor and analyze security events, identify vulnerabilities, and develop strategies to address security incidents.
• •Conduct vulnerability assessments, risk analysis, and security audits to identify weaknesses in systems and processes.
• •Coordinates cyber security risks that could affect aviation safety in Tewkesbury.
• •Serves as the primary interface for EASA Part-IS in CAG Tewkesbury with EASA regulators and auditors.
• •Coordinates and aligns efforts with other EASA Part-IS leads in other regions to reduce duplication.
• •Follow, prepare, design, and test security incident response procedures and playbooks.
• •Document, prioritize, and formally report incidents, root cause analyses, and after-action reviews.
• •Deploy, manage and maintain all security systems and their corresponding or associated software, including endpoint security software, intrusion detection systems, cryptography systems, and privileged account management software.
• •Participant in and \ or lead the implementation of security controls, tools, and infrastructure to protect systems and data.
• •Experience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 & 171, ISO, etc.
• •Must be onsite 75% at Tewkesbury.
• •Travel to other Moog locations in Wolverhampton and Dublin, IRE will be required several times a year.

How We Care for You

• •Flexible benefits package and development opportunities to support career progression
• •33 days annual leave (including bank holidays)
• •Private medical insurance, mental health support and financial advice
• •Generous life assurance and company pension contribution (from 6%)
• •Employee share options, free onsite parking, EV charging and gym facilities