Cyber Security Analyst

About MDA Space

Building the space between proven and possible, MDA Space is a trusted mission partner to the global space industry. A robotics, satellite systems and geointelligence pioneer with a 55-year+ story of world firsts and more than 450 missions, MDA Space is a global leader in communications satellites, Earth and space observation, and space exploration and infrastructure. The global MDA Space team of more than 3,800 space experts has the knowledge and know-how to turn an audacious customer vision into an achievable mission – bringing to bear a one-of-a-kind mix of experience, engineering excellence and wide-eyed wonder that’s been in our DNA since day one.

For more information, visit (Use the "Apply for this Job" box below)..

We’re on the hunt for a Cyber Security Analyst at any of our UK offices. MDA Space’s international footprint in the UK creates opportunities to work with some of the most exciting space industrial players in the country. Delivering all three business area capabilities in Geointelligence, Robotics & Space Operations, and Satellite Systems, our UK team provides support to our European-based customers while specializing in the development of advanced space sensors for exploration missions as well as space-based communication technology.

• Monitor security events across networks, endpoints, cloud environments, and identity systems, escalating potential security incidents as appropriate
• Perform initial triage, investigation, and documentation of security alerts and suspicious activities
• Support cyber security incident response activities, including evidence collection, analysis, containment recommendations, and post‑incident documentation
• Analyze cyber threat intelligence from internal and external sources to identify potential threats relevant to MDA's environment
• Correlate indicators of compromise (IOCs), vulnerabilities, and threat intelligence data with security monitoring tools to support threat detection and investigation efforts
• Assist in the development, testing, and tuning of security monitoring use cases, detection rules, alerts, and response procedures
• Support vulnerability assessment and remediation activities in collaboration with IT and business stakeholders
• Participate in threat hunting and proactive monitoring activities under the guidance of senior security team members
• Prepare clear and concise technical reports, incident summaries, and security findings for both technical and non‑technical audiences
• Assist with the implementation, maintenance, and effectiveness monitoring of cybersecurity controls and technologies
• Promote security awareness by providing guidance on cybersecurity best practices and security policies
• Maintain awareness of emerging cyber threats, vulnerabilities, and industry practices and share relevant findings with the team

• College diploma or university degree in Computer Science, Cyber Security, Information Technology, or a related discipline
• Typically, 2–5+ years of relevant experience in cyber security, security operations, information security, incident response, or a related technical field
• Experience investigating security alerts and incidents, including log analysis, alert triage, and incident documentation
• Working knowledge of cybersecurity frameworks and standards such as NIST CSF, NIST 800‑53, CIS Controls, or ISO 27001
• Familiarity with common security technologies, including SIEM, EDR, firewalls, IDS/IPS, vulnerability management, and identity security solutions
• Basic understanding of Cyber Threat Intelligence concepts, including threat actors, indicators of compromise, attacker tactics and techniques, and intelligence lifecycle processes
• Familiarity with the MITRE ATT&CK framework and its application to threat detection and incident investigation
• Strong analytical and problem‑solving abilities with attention to detail
• Demonstrated ability to manage assigned work effectively and collaborate within cross‑functional teams
• Strong written and verbal communication skills
• Relevant certifications such as Security+, CySA+, SSCP, GSEC, or equivalent are considered an asset
• Must be eligible for Secret level…