Incident Response Analyst

AXA UK; Royal Tunbridge Wells; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

AXA UK is seeking an Incident Response Analyst to join its Security and Resilience function. You will respond to cyber security incidents, perform forensic investigations and provide cyber threat intelligence services, helping to improve detection and response capabilities.

The role requires hands-on incident handling experience and familiarity with EDR, SIEM and log analysis. You will work with cross-functional teams; AXA UK offers flexible work arrangements, with at least two days a week in

Qualifications

• Hands-on experience in security incident handling.
• Knowledge of computer forensics, incident response and e-discovery tools (EDR, SIEM, UEBA).
• Strong time management with ability to handle a demanding workload.
• Familiarity with network protocol behaviors and packet analysis.
• Strong negotiation and conflict-resolution skills.
• Good analytical skills to identify key issues.
• Professional qualifications such as GIAC GCIH or SSCP are desirable.

Responsibilities

• Act as escalation point for UK security incidents and manage according to incident policies.
• Conduct in-depth analysis of security events using security tools.
• Support the team in process improvement, content tuning, and threat analysis.
• Collaborate with Security and Risk colleagues to manage identified risks.

Skills

Security incident handling

Incident response

Analytical thinking

Education

GIAC GCIH

SSCP

Tools

EDR

NDR

UEBA

Honeypots

Data Loss Prevention

SIEM

Log Managers

Job description

About AXA

AXA is a global leader in insurance and financial services, dedicated to helping customers protect what matters most to them. As the sixth-largest insurance company in the world, we provide a wide range of services, including health, car, home, and business insurance. We support millions of customers worldwide, helping them navigate life's uncertainties with confidence.

About AXA

AXA is a global leader in insurance and financial services, dedicated to helping customers protect what matters most to them. As the sixth-largest insurance company in the world, we provide a wide range of services, including health, car, home, and business insurance. We support millions of customers worldwide, helping them navigate life's uncertainties with confidence.

AXA UK Support Functions look after our three customer-facing business units, providing the infrastructure and expertise to make sure we can be there for our customers.

Job Overview

We have a new opportunity for an Incident Response Analyst to join our Security and Resilience function in AXA UK. You’ll respond to Cyber Security incidents performing forensic investigations and providing cyber threat intelligence services. You'll also support the team to improve and streamline the detection and response function.

Key Responsibilities

• Acting as an escalation point for all UK security incidents, ensuring incidentsare managed in accordance with UK and Group incident management requirements
• Performing in-depth analysis of security events utilising a range of security tools
• Supporting the wider team in process improvement, detection content tuning, and threat analysis
• Working with a range of Security and Risk colleagues to ensure all identified risks are identified and managed appropriately

Work Arrangements

At AXA we work smart, empowering our people to balance their time between home and the office in a way that works best for them, their team and our customers. You'll work at least two days a week (40%) away from home, moving to three days a week (60%) from December 2026. Away from home means attending the office, visiting clients or attending industry events. We’re also happy to consider flexible working arrangements, which you can discuss with Talent Acquisition.

Your Skills & Experience

• Hands on experience ofsecurityincident handling
• Knowledge of relevant computer forensics, incident response and e-discovery tools, EDR, NDR, UEBA, honeypots,data loss prevention, SIEM,and Log Managers
• Excellent time management skills, including the ability to manage a demanding and variable workload with tight deadlines
• Understanding of common protocol behaviours and comfortable with packet analysis is desirable
• Ability to negotiate and resolve conflict
• Good analytical skills and the ability to clearly identify key issues
• Relevant professional qualificationse.g. GIAC CGIH andSSCP is desirable