Cyber Threat & Vulnerability Analyst

The-Aa; Basingstoke; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Annual bonus opportunity

25 days annual leave plus holidays

Pension contribution up to 7%

Free AA breakdown membership

Employee discounts on AA products

GP access and wellbeing support

Job summary

The AA in Basingstoke is seeking a Threat & Vulnerability Analyst to join our Cybersecurity team and help reduce cyber exposure across the organisation.

You will work with vulnerability data to prioritise risk, support remediation and help advance our Continuous Threat Exposure Management approach. This hands-on role suits someone building a cyber career in security across SOC, IT or risk teams.

Qualifications

• Understanding of vulnerability lifecycle, prioritisation, remediation and reporting.
• Knowledge of vulnerability testing concepts (CVEs, CVSS, exploitability).
• Ability to analyse data, identify trends and turn findings into actions.
• Experience coordinating with technical teams to drive remediation.
• Curiosity about threats and ambition to grow in Threat & Vulnerability Management.
• Self-motivated with ability to manage competing priorities in a fast-paced environment.

Responsibilities

• Analyse and triage vulnerabilities, validate findings and identify issues needing attention.
• Support Continuous Threat Exposure Management by linking threat intel, exploitability and business context.
• Track remediation activity to resolution, escalate blockers where needed.
• Support external attack surface management and identify exposure across the tech environment.
• Analyse data to identify trends and risks, producing clear management information.
• Collaborate with Cybersecurity Ops and other tech teams to improve vulnerability response.

Skills

Vulnerability management

Cyber security fundamentals

Vulnerability data analysis

Threat & vulnerability prioritisation

Cross-team collaboration

Curiosity about threats

Proactive/work prioritisation

Tools

Wiz

Tenable

Qualys

Microsoft Defender Vulnerability Management

Defender ATP Hunter

Burp Suite

ServiceNow

Jira

Power BI

KQL

PowerShell

Python

Job description

Location: Basingstoke (Hybrid working, 3 office days per week) *plus some monthly travel to our central London office.

Employment Type: Permanent, Full Time

Why Join Us?

• Annual bonus opportunity
• Shape and embed The AA’s critical data governance operating model across a large, complex organisation
• Build a meaningful Group wide capability with strong executive sponsorship and the opportunity to influence how data is governed from an early stage
• Play a key role in ensuring trusted, high-quality data supports better decision making, customer outcomes and our growing Data and AI ambitions

For over a century, The AA has been keeping Britain moving. Today, millions of drivers trust us to be there when it matters most, and we're equally committed to supporting the people who make that possible. With a 4.5-star Glassdoor rating, we've built a culture where colleagues are empowered to grow, collaborate and make a real impact for our customers on every journey. Which has been recognised by Sunday Times "Best Places to Work" for the last two years.

Job Description

This is the Job

We're looking for a Threat & Vulnerability Analyst to join our Cybersecurity team and help us understand, prioritise and reduce cyber exposure across The AA. You'll work with vulnerability and threat data to identify where our greatest risks sit, support remediation activity and help us continue developing our approach to Continuous Threat Exposure Management.

This is a hands-on role with plenty of opportunity to learn and develop. You might already work in vulnerability management, or you could be building your cyber career within a SOC, End User Computing, infrastructure, technical support or another security focused environment and be ready to specialise. We're interested in your understanding of vulnerabilities and security testing, your curiosity about how attackers exploit weaknesses and, importantly, your motivation to develop your expertise.

Working across Cybersecurity, Infrastructure, Cloud, Applications, End User Computing, Service Management and Risk, you'll turn technical findings into meaningful insight and help ensure vulnerabilities are prioritised according to their real-world risk. You'll also gain exposure to modern vulnerability and exposure management tools and help us strengthen how we identify, track and manage cyber exposure across the organisation.

Key Responsibilities

• Analyse and triage vulnerabilities and exposures, helping validate findings and identify the issues that require attention
• Support our Continuous Threat Exposure Management capability, bringing together threat intelligence, exploitability, asset criticality and business context to help prioritise risk
• Track vulnerabilities and remediation activity through to resolution, working with technical teams to establish ownership and elevate blockers where needed
• Support external attack surface management and help identify potential exposure across our technology environment
• Analyse vulnerability data to identify trends, gaps and emerging risks, producing clear reporting and management information
• Work closely with Cybersecurity Operations and wider technology teams to support critical vulnerability response and continually improve our approach to vulnerability management

What Do I Need?

You’ll Bring

• A good understanding of cyber security vulnerabilities and the vulnerability management lifecycle, including identification, prioritisation, remediation and reporting
• An understanding of vulnerability and security testing concepts, such as CVEs, CVSS, exploitability, patching, compensating controls and risk acceptance
• The ability to analyse technical information or data, identify trends and priorities, and turn findings into clear actions
• Experience working with technical teams to investigate issues, coordinate activity or track actions through to resolution
• Curiosity about cyber threats and how vulnerabilities can be exploited, combined with enthusiasm for developing your knowledge of Threat and Vulnerability Management
• A proactive and self-motivated approach, with the ability to manage competing priorities and work effectively in a fast-paced environment

Nice to Have

• Exposure to vulnerability or exposure management technologies such as Wiz, Tenable, Qualys, Microsoft Defender Vulnerability Management, Defender Advanced Threat Hunting, Burp Suite or similar
• Familiarity with external attack surface management, penetration testing, security testing, threat intelligence or Red or Purple Teaming
• Experience with tools such as ServiceNow, Jira, Power BI, KQL, PowerShell or Python, or relevant cyber security training or certifications

Additional Information

Belonging at The AA

At The AA, we value the unique perspectives, experiences and ideas that our people bring. We've nurtured a workplace where everyone feels valued, respected and empowered to do their best work.

Through our employee communities and inclusion initiatives, we’ve created opportunities for people to connect, share experiences and influence positive change across the business. This is a place where your voice matters and where you can belong, grow and succeed.

Driven by People, Rewarded by Benefits

We believe in rewarding our people. That's why we offer a comprehensive benefits package including;

• 25 days' annual leave plus bank holidays, the option to buy additional holiday
• Up to 7% employer pension contribution
• Free AA breakdown membership from Day One with 50% discount for family and friends, discounts on AA products including car and home insurance
• 24/7 GP access and wellbeing support for you and your family
• A wide range of employee discounts, including our popular car salary sacrifice scheme