Security Operations Analyst (Cybersecurity)

Location: Hybrid in Tewkesbury, UK, with at least 75% onsite attendance. Travel to hirify.global locations in Wolverhampton and Dublin is required several times a year.

Company

hirify.global is an aerospace and technology company with a performance-focused culture centered on solving technical challenges.

What you will do

• Act as the designated EASA Part-IS lead for Tewkesbury and operate and maintain the compliant information security management system.
• Monitor and analyze security events, investigate incidents, identify vulnerabilities, and develop response strategies.
• Conduct vulnerability assessments, risk analyses, security audits, and cybersecurity risk coordination affecting aviation safety.
• Serve as the primary interface with EASA regulators and auditors and coordinate with Part-IS leads in other regions.
• Prepare, design, test, document, prioritize, and report incident response procedures, playbooks, root-cause analyses, and after-action reviews.
• Deploy, manage, and maintain endpoint security, intrusion detection, cryptography, privileged account management, and other security systems; participate in implementing security controls, tools, and infrastructure.

Requirements

• Bachelor’s degree in information security, information technology, computer science, or a related field is preferred.
• More than 3 years of security experience and more than 5 years of IT administration experience, including 1–3 years working with EDR/XDR or endpoint security technologies, SIEM platforms, email security platforms, privileged account management, and vulnerability management.
• Strong understanding of enterprise security architecture design, security concepts, principles, and technologies.
• Ability to prioritize and execute tasks effectively in a high-pressure environment, conduct research and log analysis, and solve IT security issues.
• Demonstrated communication skills with technical and non-technical audiences.
• Understanding of security policies, standards, and procedures.
• Flexible availability for non-traditional working hours based on business needs.
• Ability to work onsite in Tewkesbury at least 75% of the time and travel to Wolverhampton and Dublin several times a year.

Nice to have

• Relevant industry-recognized security certifications, such as CompTIA Security+, Certified Ethical Hacker, GIAC Security Essentials, ISACA Certified Information Security Manager, Microsoft Certified Systems Engineer: Security, or ISC2 certifications including CC, SCCP, CISSP, ISSAP, or ISSEP.
• Experience with cybersecurity frameworks including Cyber Essentials Plus, CMMC, NIST SP 800-53 and 800-171, and ISO.
• Familiarity with scripting languages such as Python.
• Experience with MITRE ATT&CK and Cyber Kill Chain frameworks.
• Proven analytical and problem-solving abilities.
• More than 1 year of experience with vulnerability management platforms, cloud platforms and security including Azure, AWS, or GCP, attack surface management platforms, and endpoint encryption.

Culture & Benefits

• Flexible benefits package and development opportunities supporting career progression.
• 33 days of annual leave including bank holidays.
• Private medical insurance, mental health support, and financial advice.
• Life assurance and company pension contributions from 6%.
• Employee share options, free onsite parking, EV charging, and gym facilities.