Security Operations Analyst

Moog is a performance culture that empowers people to achieve great things. Our people enjoy solving interesting technical challenges in a culture where everyone trusts each other to do the right thing. For you, working with us can mean deeper job satisfaction, better rewards, and a great quality of life inside and outside of work.

Job Title:

Security Operations Analyst Reporting To:

Head, IT Section

Work Schedule:

Hybrid – Tewkesbury, GBRMoog's Corporate Group is seeking a Security Operations Analyst to support activities at our Tewkesbury site!

As a Security Operations Analyst, you will be responsible for supporting and monitoring Moog’s cybersecurity operations. In this role, we expect you to be a cybersecurity professional who monitors security alerts, investigates security incidents, conducts risk assessments, implements security controls, and contributes to the development of security policies & procedures. This position will be located at the Moog facility in Tewkesbury, UK with a focus on the EASA Part-IS regulations.

To be considered for the Security Operations Analyst role, here's what you'll need to bring with you:

Typically, a bachelor’s degree in information security, Information Technology, Computer Science or related field preferred.

More than three years’ experience in Security with more than five years working in an IT administration role.

Experience should also include one to three years working with the following security tools and technologies:

EDR / XDR platforms or Endpoint Security technologies
SIEM platforms

Email Security Platforms Privileged Account Management Vulnerability Management Strong understanding of enterprise security architecture design, security concepts, principles, and technologies.

Ability to effectively prioritize and execute tasks in a high-pressure environment.

Ability to conduct research and log analysis into IT security issues and products as required.

Demonstrated communication skills with both technical and non-technical audiences.

Understanding of security policies, standards, and procedures.

Incumbent must have flexible availability, as non-traditional work hours will be required, based on business need.

It would also be beneficial if you had:

One or more of the following (or similar) relevant industry-recognized security certifications:

CompTIA Security+ or Security XCertified Ethical HackerGIAC Security Essentials CertificationISACA Certified Information Security Manager Microsoft Certified Systems Engineer:
Security(ISC)2 CC, SCCP, CISSP, ISSAP, or ISSEPExperience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 & 171, ISO, etc.

Familiarity with scripting languages (e.g., Python)

Working experience with MITRE ATT&CK and Cyber Kill Chain frameworks

Proven analytical and problem-solving abilities

Over one (1) year of experience working with the following security tools and technologies:

Vulnerability Management Platforms Cloud Platforms & Security (Azure, AWS, or GCP)
Attack Surface Management Platforms Endpoint encryption

As the Security Operations Analyst, you will:

Act as the designated EASA Part-IS lead in Tewkesbury.

Operates and maintains the EASA Part-IS-compliant ISMS in Tewkesbury.

Monitor and analyze security events, identify vulnerabilities, and develop strategies to address security incidents.

Conduct vulnerability assessments, risk analysis, and security audits to identify weaknesses in systems and processes.

Coordinates cyber security risks that could affect aviation safety in Tewkesbury. Serves as the primary interface for EASA Part-IS in CAG Tewkesbury with EASA regulators and auditors. Coordinates and aligns efforts with other EASA Part-IS leads in other regions to reduce duplication.

Follow, prepare, design, and…