Security Operations Analyst

Description

The company is a performance-focused business where people enjoy solving technical problems and work with a high level of trust.

The corporate group is hiring a Security Operations Analyst to support cybersecurity operations at the Tewkesbury site. The role reports to the Head of the IT Section.

You will monitor and support the company's cybersecurity operations, with a focus on EASA Part-IS regulations.

Responsibilities

• Act as the designated EASA Part-IS lead in Tewkesbury.
• Run and maintain the EASA Part-IS-compliant ISMS at the Tewkesbury site.
• Watch security events, find vulnerabilities, and plan how to respond to incidents.
• Carry out vulnerability assessments, risk analyses, and security audits of systems and processes to find weaknesses.
• Manage cyber security risks at Tewkesbury that could affect aviation safety.
• Be the main contact for EASA regulators and auditors on Part-IS at CAG Tewkesbury.
• Work with other regional EASA Part-IS leads to avoid duplicated effort.
• Write, test, and refine incident response procedures and playbooks.
• Log, rank, and formally report incidents, root cause analyses, and after-action reviews.
• Deploy and maintain security systems and their software, including endpoint security, intrusion detection, cryptography, and privileged account management.
• Take part in, or lead, the rollout of security controls, tools, and infrastructure that protect systems and data.
• Contribute to the development of security policies and procedures.

Requirements

• Typically a bachelor's degree in information security, information technology, computer science, or a related field, preferred.
• More than three years in security and more than five years in an IT administration role.
• One to three years working with EDR, XDR, or endpoint security technologies, SIEM platforms, email security platforms, privileged account management, and vulnerability management.
• A strong understanding of enterprise security architecture, concepts, principles, and technologies.
• The ability to prioritise and complete tasks under high pressure.
• The ability to research and analyse logs to investigate IT security issues and products.
• Clear communication with both technical and non-technical audiences.
• An understanding of security policies, standards, and procedures.
• Flexible availability, as non-traditional hours will be needed depending on business need.
• Beneficial: one or more relevant industry security certifications, such as CompTIA Security+ or Security X, Certified Ethical Hacker, GIAC Security Essentials, ISACA Certified Information Security Manager, Microsoft Certified Systems Engineer: Security, or (ISC)2 CC, SCCP, CISSP, ISSAP, or ISSEP.
• Beneficial: experience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 and 171, ISO, and others.
• Beneficial: familiarity with scripting languages such as Python.
• Beneficial: working experience with the MITRE ATT&CK and Cyber Kill Chain frameworks.
• Beneficial: proven analytical and problem-solving skills.
• Beneficial: over one year of experience with vulnerability management platforms, cloud platforms and security (Azure, AWS, or GCP), attack surface management platforms, and endpoint encryption.

Conditions

The role is hybrid, based at the Tewkesbury site in the UK.

You must be onsite 75% of the time at Tewkesbury.

Travel to other company locations in Wolverhampton and Dublin, Ireland, will be required several times a year.

Benefits

• A flexible benefits package and development opportunities to support career progression.
• 33 days of annual leave, including bank holidays.
• Private medical insurance, mental health support, and financial advice.
• Life assurance and a company pension contribution from 6%.
• Employee share options, free onsite parking, EV charging, and gym facilities.