Cyber Threat & Vulnerability Analyst

The Aa; England; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

25 days annual leave

Employer pension contribution up to 7%

AA breakdown membership with 50% staff

GP access and wellbeing support

Job summary

The AA is seeking a Threat & Vulnerability Analyst to join our Cybersecurity team in the United Kingdom. You will work with vulnerability data to identify and prioritise risks, support remediation, and help evolve our Continuous Threat Exposure Management approach.

This hands-on role offers learning opportunities across vulnerability management, threat intelligence and security testing, with exposure to modern tools and a fast-paced environment.

Qualifications

• Solid understanding of the vulnerability management lifecycle (identification, prioritisation, remediation, reporting).
• Experience analysing vulnerability data and identifying trends and priorities.
• Ability to coordinate with technical teams to investigate issues and drive resolution.
• Curiosity about cyber threats and enthusiasm for Threat & Vulnerability Management.
• Proactive, self-motivated with ability to manage competing priorities in fast-paced environments.
• Knowledge of vulnerability testing concepts such as CVEs, CVSS, exploitability and risk acceptance.

Responsibilities

• Analyse and triage vulnerabilities and exposures, validating findings and prioritising issues.
• Support Continuous Threat Exposure Management by combining threat intel, exploitability, asset criticality and business context.
• Track remediation activity through to resolution; establish ownership and escalate blockers as needed.
• Support external attack surface management and identify exposure across the technology stack.
• Analyse vulnerability data to identify trends, gaps and emerging risks; produce clear reports and insights.
• Collaborate with Cybersecurity Operations and wider tech teams to improve vulnerability response.

Skills

Vulnerability management

Threat & vulnerability management

Analytical thinking

Cross-team collaboration

Prioritisation

Tools

Wiz

Tenable

Qualys

Defender Vulnerability Management

Burp Suite

ServiceNow

Jira

Power BI

KQL

PowerShell

Python

Job description

Job Description

This is the Job

We’re looking for a Threat & Vulnerability Analyst to join our Cybersecurity team and help us understand, prioritise and reduce cyber exposure across The AA. You’ll work with vulnerability and threat data to identify where our greatest risks sit, support remediation activity and help us continue developing our approach to Continuous Threat Exposure Management.

This is a hands-on role with plenty of opportunity to learn and develop. You might already work in vulnerability management, or you could be building your cyber career within a SOC, End User Computing, infrastructure, technical support or another security focused environment and be ready to specialise. We’re interested in your understanding of vulnerabilities and security testing, your curiosity about how attackers exploit weaknesses and, importantly, your motivation to develop your expertise.

Working across Cybersecurity, Infrastructure, Cloud, Applications, End User Computing, Service Management and Risk, you’ll turn technical findings into meaningful insight and help ensure vulnerabilities are prioritised according to their real-world risk. You’ll also gain exposure to modern vulnerability and exposure management tools and help us strengthen how we identify, track and manage cyber exposure across the organisation.

Key Responsibilities

• Analyse and triage vulnerabilities and exposures, helping validate findings and identify the issues that require attention
• Support our Continuous Threat Exposure Management capability, bringing together threat intelligence, exploitability, asset criticality and business context to help prioritise risk
• Track vulnerabilities and remediation activity through to resolution, working with technical teams to establish ownership and **escalate blockers where needed**
• Support external attack surface management and help identify potential exposure across our technology environment
• Analyse vulnerability data to identify trends, gaps and emerging risks, producing clear reporting and management information
• Work closely with Cybersecurity Operations and wider technology teams to support critical vulnerability response and continually improve our approach to vulnerability management

What Do I Need?

You’ll Bring

• A good understanding of cyber security vulnerabilities and the vulnerability management lifecycle, including identification, prioritisation, remediation and reporting
• An understanding of vulnerability and security testing concepts, such as CVEs, CVSS, exploitability, patching, compensating controls and risk acceptance
• The ability to analyse technical information or data, identify trends and priorities, and turn findings into clear actions
• Experience working with technical teams to investigate issues, coordinate activity or track actions through to resolution
• Curiosity about cyber threats and how vulnerabilities can be exploited, combined with enthusiasm for developing your knowledge of Threat and Vulnerability Management
• A proactive and self‑motivated approach, with the ability to manage competing priorities and work effectively in a fast‑paced environment

Nice to Have

• Exposure to vulnerability or exposure management technologies such as Wiz, Tenable, Qualys, Microsoft Defender Vulnerability Management, Defender Advanced Threat Hunting, Burp Suite or similar
• Familiarity with external attack surface management, penetration testing, security testing, threat intelligence or Red or Purple Teaming
• Experience with tools such as ServiceNow, Jira, Power BI, KQL, PowerShell or Python, or relevant cyber security training or certifications

Additional Information

Belonging at The AA

At The AA, we value the unique perspectives, experiences and ideas that our people bring. We've nurtured a workplace where everyone feels valued, respected and empowered to do their best work.

Through our employee communities and inclusion initiatives, we’ve created opportunities for people to connect, share experiences and influence positive change across the business. This is a place where your voice matters and where you can belong, grow and succeed.

Driven by People, Rewarded by Benefits

We believe in rewarding our people. That's why we offer a comprehensive benefits package including;

• 25 days' annual leave plus bank holidays, the option to buy additional holiday
• Up to 7% employer pension contribution
• Free AA breakdown membership from Day One with 50% discount for family and friends, discounts on AA products including car and home insurance
• 24/7 GP access and wellbeing support for you and your family
• A wide range of employee discounts, including our popular car salary sacrifice scheme

#LI-HH

#LI-Hybrid