Proactive Security Analyst - Breach & Attack Simulation

AXA Group; West of England, Greater London; Hybrid; GBP 55,000 - 90,000; Full time

Job summary

AXA UK is seeking a Security Analyst to join the Proactive Security team to support Breach and Attack Simulation tooling. You will operate at the intersection of technical depth and strategic impact, applying attacker techniques in real environments and translating findings for senior stakeholders.

In this role, you will review threat intel, validate penetration test scopes, and drive remediation through BAS tooling. The position offers hybrid working with a mix of home and office time in the UK.

Qualifications

• Hands-on threat/penetration testing experience across internal, external, web app and cloud environments.
• Strong understanding of IT systems, vulnerabilities and cloud security.
• Experience with threat frameworks (MITRE ATT&CK) and security standards (NIST, ISO 27001/27002).
• Curiosity to challenge assumptions and improve resilience.

Responsibilities

• Review threat intel and pen test findings to prioritise BAS use cases.
• Support penetration testing engagements and validate scope and reports.
• Assess remediation plans and verify fixes with BAS tooling.
• Investigate BAS control test failures and raise remediation requests.
• Produce metrics and executive reports translating technical findings for leadership.
• Identify opportunities to improve and scale security processes.

Skills

Penetration testing

Cloud security

Analytical skills

MITRE ATT&CK

NIST/ISO frameworks

Cybersecurity standards

Crest/CBEST/TIGER familiarity

Education

OSCP or equivalent

MSc in Cyber Security or IT

Job description

AXA UK is seeking a Security Analyst to join the Proactive Security team to support Breach and Attack Simulation tooling. You will operate at the intersection of technical depth and strategic impact, applying attacker techniques in real environments and translating findings for senior stakeholders.

In this role, you will review threat intel, validate penetration test scopes, and drive remediation through BAS tooling. The position offers hybrid working with a mix of home and office time in the UK.