Cyber Threat & Vulnerability Analyst

The Automobile Association; Basingstoke; On-site; GBP 50,000 - 75,000; Full time

Benefits offered by this job

25 days annual leave

Employer pension contribution

Free AA breakdown membership

GP access & wellbeing support

Employee discounts

Job summary

The AA in the United Kingdom is hiring a Threat & Vulnerability Analyst to join our Cybersecurity team. You will analyze vulnerabilities, prioritise risks and support remediation across the organisation to strengthen our security posture and align with our data‑driven security strategy.

You will work with vulnerability data, threat intelligence and modern tools to identify trends, drive decisive actions and improve our continuous threat exposure management.

Qualifications

• Experience analysing vulnerabilities and risk in enterprise environments.
• Understanding of vulnerability management lifecycle and reporting.
• Ability to translate technical findings into actionable steps for teams.

Responsibilities

• Analyse and triage vulnerabilities and exposures, validating findings.
• Support Continuous Threat Exposure Management by prioritising risk.
• Coordinate remediation activity with technical teams to drive resolution.
• Assist external attack surface management and identify exposure across tech.
• Produce clear reporting and management information on trends and risks.
• Collaborate with Cybersecurity and other tech teams to improve response.
• Demonstrate knowledge of CVEs, CVSS, patching and risk acceptance.

Skills

Vulnerability analysis

Threat intelligence

Remediation coordination

Data interpretation

Stakeholder communication

Tools

Wiz

Tenable

Qualys

Microsoft Defender Vulnerability Management

Defender ATP

Burp Suite

Job description

• Annual bonus opportunity
• Shape and embed The AA's critical data governance operating model across a large, complex organisation
• Build a meaningful Group wide capability with strong executive sponsorship and the opportunity to influence how data is governed from an early stage
• Play a key role in ensuring trusted, high-quality data supports better decision making, customer outcomes and our growing Data and AI ambitions

For over a century, The AA has been keeping Britain moving. Today, millions of drivers trust us to be there when it matters most, and we're equally committed to supporting the people who make that possible. With a 4.5-star Glassdoor rating, we've built a culture where colleagues are empowered to grow, collaborate and make a real impact for our customers on every journey. Which has been recognised by Sunday Times "Best Places to Work" for the last two years., We're looking for a Threat & Vulnerability Analyst to join our Cybersecurity team and help us understand, prioritise and reduce cyber exposure across The AA. You'll work with vulnerability and threat data to identify where our greatest risks sit, support remediation activity and help us continue developing our approach to Continuous Threat Exposure Management. This is a hands-on role with plenty of opportunity to learn and develop. You might already work in vulnerability management, or you could be building your cyber career within a SOC, End User Computing, infrastructure, technical support or another security focused environment and be ready to specialise. We're interested in your understanding of vulnerabilities and security testing, your curiosity about how attackers exploit weaknesses and, importantly, your motivation to develop your expertise. Working across Cybersecurity, Infrastructure, Cloud, Applications, End User Computing, Service Management and Risk, you'll turn technical findings into meaningful insight and help ensure vulnerabilities are prioritised according to their real-world risk. You'll also gain exposure to modern vulnerability and exposure management tools and help us strengthen how we identify, track and manage cyber exposure across the organisation.

Key Responsibilities

• Analyse and triage vulnerabilities and exposures, helping validate findings and identify the issues that require attention
• Support our Continuous Threat Exposure Management capability, bringing together threat intelligence, exploitability, asset criticality and business context to help prioritise risk
• Track vulnerabilities and remediation activity through to resolution, working with technical teams to establish ownership and elevate blockers where needed
• Support external attack surface management and help identify potential exposure across our technology environment
• Analyse vulnerability data to identify trends, gaps and emerging risks, producing clear reporting and management information
• Work closely with Cybersecurity Operations and wider technology teams to support critical vulnerability response and continually improve our approach to vulnerability management
• A good understanding of cyber security vulnerabilities and the vulnerability management lifecycle, including identification, prioritisation, remediation and reporting
• An understanding of vulnerability and security testing concepts, such as CVEs, CVSS, exploitability, patching, compensating controls and risk acceptance
• The ability to analyse technical information or data, identify trends and priorities, and turn findings into clear actions
• Experience working with technical teams to investigate issues, coordinate activity or track actions through to resolution
• Curiosity about cyber threats and how vulnerabilities can be exploited, combined with enthusiasm for developing your knowledge of Threat and Vulnerability Management
• A proactive and self-motivated approach, with the ability to manage competing priorities and work effectively in a fast-paced environment

Nice to Have

• Exposure to vulnerability or exposure management technologies such as Wiz, Tenable, Qualys, Microsoft Defender Vulnerability Management, Defender Advanced Threat Hunting, Burp Suite or similar
• Familiarity with external attack surface management, penetration testing, security testing, threat intelligence or Red or Purple Teaming
• Experience with tools such as ServiceNow, Jira, Power BI, KQL, PowerShell or Python, or relevant cyber security training or certifications

At The AA, we value the unique perspectives, experiences and ideas that our people bring. We've nurtured a workplace where everyone feels valued, respected and empowered to do their best work. Through our employee communities and inclusion initiatives, we've created opportunities for people to connect, share experiences and influence positive change across the business. This is a place where your voice matters and where you can belong, grow and succeed. Driven by People, Rewarded by Benefits We believe in rewarding our people. That's why we offer a comprehensive benefits package including;

• 25 days' annual leave plus bank holidays, the option to buy additional holiday
• Up to 7% employer pension contribution
• Free AA breakdown membership from Day One with 50% discount for family and friends, discounts on AA products including car and home insurance
• 24/7 GP access and wellbeing support for you and your family
• A wide range of employee discounts, including our popular car salary sacrifice scheme