Security Operations Analyst

Moog is a performance culture that empowers people to achieve great things. Our people enjoy solving interesting technical challenges in a culture where everyone trusts each other to do the right thing. For you, working with us can mean deeper job satisfaction, better rewards, and a great quality of life inside and outside of work.

Job Title:

Reporting To:

Work Schedule:

Moog's Corporate Group is seeking a Security Operations Analyst to support activities at our Tewkesbury site!

As aSecurity Operations Analyst, you will be responsible for supporting and monitoring Moog’s cybersecurity operations. In this role, we expect you to be a cybersecurity professional who monitors security alerts, investigates security incidents, conducts risk assessments, implements security controls, and contributes to the development of security policies & procedures. This position will be located at the Moog facility in Tewkesbury, UK with a focus on the EASA Part-IS regulations.

To be considered for the Security Operations Analyst role, here's what you'll need to bring with you:

• Typically, a bachelor’s degree in information security, Information Technology, Computer Science or related field preferred.
• More than three years’ experience in Security with more than five years working in an IT administration role.
  • Experience should also include one to three years working with the following security tools and technologies:
    • EDR / XDR platforms or Endpoint Security technologies          
    • SIEM platforms
    • Email Security Platforms
    • Privileged Account Management
    • Vulnerability Management
• Strong understanding of enterprise security architecture design, security concepts, principles, and technologies.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Ability to conduct research and log analysis into IT security issues and products as required.
• Demonstrated communication skills with both technical and non-technical audiences.
• Understanding of security policies, standards, and procedures.
• Incumbent must have flexible availability, as non-traditional work hours will be required, based on business need.

It would also be beneficial if you had:

• One or more of the following (or similar) relevant industry-recognized security certifications:
  • CompTIA Security+ or Security X
  • Certified Ethical Hacker
  • GIAC Security Essentials Certification
  • ISACA Certified Information Security Manager
  • Microsoft Certified Systems Engineer: Security
  • (ISC)2 CC, SCCP, CISSP, ISSAP, or ISSEP
• Experience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 & 171, ISO, etc.
• Familiarity with scripting languages (e.g., Python)
• Working experience with MITRE ATT&CK and Cyber Kill Chain frameworks
• Proven analytical and problem-solving abilities
• Over one (1) year of experience working with the following security tools and technologies:
  • Vulnerability Management Platforms
  • Cloud Platforms & Security (Azure, AWS, or GCP)
  • Attack Surface Management Platforms
  • Endpoint encryption

As the Security Operations Analyst, you will:

• Act as the designated EASA Part-IS lead in Tewkesbury.
• Operates and maintains the EASA Part-IS-compliant ISMS in Tewkesbury.
• Monitor and analyze security events, identify vulnerabilities, and develop strategies to address security incidents.
• Conduct vulnerability assessments, risk analysis, and security audits to identify weaknesses in systems and processes.
• Coordinates cyber security risks that could affect aviation safety in Tewkesbury. 
• Serves as the primary interface for EASA Part-IS in CAG Tewkesbury with EASA regulators and auditors. 
• Coordinates and aligns efforts with other EASA Part-IS leads in other regions to reduce duplication.
• Follow, prepare, design, and test security incident response procedures and playbooks.
• Document, prioritize, and formally report incidents, root cause analyses, and after-action reviews.
• Deploy, manage and maintain all security systems and their corresponding or associated software, including endpoint security software, intrusion detection systems, cryptography systems, and privileged account management software.
• Participant in and \ or lead the implementation of security controls, tools, and infrastructure to protect systems and data.
• Experience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 & 171, ISO, etc.
• Must be onsite 75% at Tewkesbury.
• Travel to other Moog locations in Wolverhampton and Dublin, IRE will be required several times a year.
  

How We Care forYou

• Flexible benefits package and development opportunities to support career progression
• 33 days annual leave (including bank holidays)
• Private medical insurance, mental health support and financial advice
• Generous life assurance and company pension contribution (from 6%)
• Employee share options, free onsite parking, EV charging and gym facilities