Security Operations Analyst

Moog is a performance culture that empowers people to achieve great things. Our people enjoy solving interesting technical challenges in a culture where everyone trusts each other to do the right thing. For you, working with us can mean deeper job satisfaction, better rewards, and a great quality of life inside and outside of work. Job Title : Security Operations Analyst Reporting To: Head, IT Section Work Schedule: Hybrid – Baguio City, PH As an IT Security Analyst, you will be responsible for supporting and monitoring Moog’s cybersecurity operations. The IT Security Analyst is a cybersecurity professional who monitors security alerts, investigates security incidents, conducts risk assessments, implements security controls, and contributes to the development of security policies & procedures. This position will be located at the Moog facility in Baguio, Philippines with a focus on the EASA Part-IS regulation. Responsibilities: Act as the designated EASA Part-IS lead in Baguio. Operates and maintains the EASA Part-IS-compliant ISMS in Baguio Monitor and analyze security events, identify vulnerabilities, and develop strategies to address security incidents. Conduct vulnerability assessments, risk analysis, and security audits to identify weaknesses in systems and processes. Coordinates cyber security risks that could affect aviation safety in Baguio. Serves as the primary interface for EASA Part-IS in CAG Baguio with EASA regulators and auditors. Coordinates and aligns efforts with other EASA Part-IS leads in other regions to reduce duplication. Follow, prepare, design, and test security incident response procedures and playbooks. Document, prioritize, and formally report incidents, root cause analyses, and after-action reviews. Deploy, manage and maintain all security systems and their corresponding or associated software, including endpoint security software, intrusion detection systems, cryptography systems, and privileged account management software. Participant in and \ or lead the implementation of security controls, tools, and infrastructure to protect systems and data. Experience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 & 171, ISO, etc. Must be onsite 75%. Travel to other Moog Asia Pacific locations will be required. Qualifications: Bachelor’s degree in Information Security, Information Technology, Computer Science or related field preferred. More than 3 years’ experience in Security with more than five years working in an IT administration role. Experience should also include 1 to 3 years working with the following security tools and technologies: EDR / XDR platforms or Endpoint Security technologies SIEM platforms Email Security Platforms Privileged Account Management Vulnerability Management Strong understanding of enterprise security architecture design, security concepts, principles, and technologies. Ability to effectively prioritize and execute tasks in a high-pressure environment. Ability to conduct research and log analysis into IT security issues and products as required. Demonstrated communication skills with both technical and non-technical audiences. Understanding of security policies, standards, and procedures. Incumbent must have flexible availability, as non-traditional work hours will be required, based on business need. Preferred Qualifications: One or more of the following (or similar) relevant industry-recognized security certifications: CompTIA Security+ or Security X Certified Ethical Hacker GIAC Security Essentials Certification ISACA Certified Information Security Manager Microsoft Certified Systems Engineer: Security (ISC)2 CC, SCCP, CISSP, ISSAP, or ISSEP Experience with cybersecurity frameworks such as Cyber Essential Plus, CMMC, NIST SP 800-53 & 171, ISO, etc. Familiarity with scripting languages (e.g., Python) Working experience with MITRE ATT&CK and Cyber Kill Chain frameworks Proven analytical and problem-solving abilities 1– 3years of experience working with the following security tools and technologies: Vulnerability Management Platforms Cloud Platforms & Security (Azure, AWS, or GCP) Attack Surface Management Platforms Endpoint encryption