Proactive Security Analyst: BAS & Threat Intelligence

AXA UK; West of England; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Accessibility Concierge

Flexible working arrangements

Hybrid work model

Job summary

AXA UK is seeking a Security Analyst to join the Proactive Security team and support Breach and Attack Simulation tooling. The role focuses on challenging defences using attacker techniques within regulated environments, utilising MITRE ATT&CK, CREST, CBEST, TIGER and ISO frameworks.

You will work with cutting-edge tooling and experienced security professionals, building skills for a future in cyber security across cloud and on-premises environments.

Qualifications

• Hands-on technical penetration testing experience (internal, external, web, cloud).
• Deep understanding of IT systems and vulnerabilities across cloud environments and on-prem components.
• Experience in cloud security engineering or IT infrastructure is advantageous.
• Strong analytical and problem-solving skills; ability to dig into technical details.
• Comfortable challenging ambiguity and asking the right questions.

Responsibilities

• Review threat intelligence feeds and testing findings to prioritise BAS use cases.
• Support penetration testing engagements and validate scope and reports.
• Review remediation plans and verify fixes with BAS tooling.
• Investigate BAS control test failures and raise remediation requests.
• Produce clear metrics and reports for executive steering groups.
• Identify opportunities to sharpen, simplify and scale processes.

Skills

Penetration testing

Cloud security

Threat modelling

MITRE ATT&CK

Security frameworks

Analytical skills

Communication

OSCP/ MSc desirable

Education

OSCP or equivalent

MSc in Cyber Security or IT (desirable)

Tools

AWS

Azure

GCP

Job description

AXA UK is seeking a Security Analyst to join the Proactive Security team and support Breach and Attack Simulation tooling. The role focuses on challenging defences using attacker techniques within regulated environments, utilising MITRE ATT&CK, CREST, CBEST, TIGER and ISO frameworks.

You will work with cutting-edge tooling and experienced security professionals, building skills for a future in cyber security across cloud and on-premises environments.