Technical Operations Analyst

Job Title: Technical Operations Analyst

Location: Preston/Frimley- We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role.

Referral Bonus: £1000

Grade: GG09

You’re expected to have completed 12 months in role prior to applying for an advertised vacancy and you should also discuss the internal opportunity with your line manager to ensure sustained business continuity and to further support your career development.

We know there may be exceptionalindividual circumstances that impact this, in the first instance please discuss this with your line manager.

If you don’t feel you can talk to your line manager, you can contact your HRBP.

PLEASE NOTE: Should you be invited for interview; you acknowledge that the Recruitment team will contact you and your line manager regarding your application for this opportunity.

Working as part of the Cyber Operations team, you will help safeguard BAE Systems against cyber threats by supporting the development and continuous enhancement of the Technical Operations capability across people, processes, and technology. The role focuses on maintaining an effective and efficient cyber operations function, while contributing to organisational, departmental, and individualobjectives and ensuring security standards and principles are consistently upheld.

Core duties

• Identification of process that can be automated to make the SOC more effective
• Assist in the creation, maintenance and troubleshooting of SOAR playbooks, automations and enrichments
• Using large datasets to construct actionable information to enhance the detection of suspicious activity within the business
• Onboarding new data sources to increase the visibility of security event information across multiple technologies
• Using detailed knowledge of the current threat landscape, the TTPs frequently employed in those attacks and how we can investigate and mitigate these
• Identify where automation can assist the Incident Response team when investigating suspicious activity
• Creation of analytic content to enable quantifiable metrics on SOCs performance

Essential Skills

Understanding of cyber security

Experience working with large unstructured datasets

• Experience with using SIEM and SOAR platforms and working with event data (eg Splunk / Sentinel)
• Experience in programming languages (Python 3, PowerShell)
• Knowledge of API interactions

The Cyber Operations Team

Cyber Operations is responsible for protecting BAE Systems from Cyber Attack by various threat actors. Not only do we protect BAE Systems and its employees, indirectly we protect those who protect us – who serve in our military and rely on the products and services we create. As part of the Technical Operations team we support SOC functions like Threat Intelligence, Detection, Incident Response and Active Defence work to evolve cyber operations as a world class capability.

Why BAE Systems?

Here you’ll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work, this is a place where you can grow your career with confidence and be empowered to be your best. You’ll be recognised for your contribution and enjoy rewards tailored to what’s most important to you and your family, support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make.

A place where everyone can thrive

We’re committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do.

We welcome applications from all suitably qualified people, who are BAE Systems employees and have been in their current role for 12 months or longer.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicantsmust as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicantsmust typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Closing Date: 9th November 2026

We are currently accepting speculative referrals for specific skillsets (roles based in the UK). Click here to find out more. All Privacy rights will be protected.

Make a speculative referral

If this advert states that this role is eligible for the UK referral scheme, but there is no link here to make a referral for this specific vacancy, please contact the Recruitment Helpdesk who will be able to advise.