Threat & Vulnerability Analyst - Cyber Risk Specialist

The AA; Greater London; Hybrid; GBP 65,000 - 80,000; Full time

Benefits offered by this job

Annual bonus

25 days' annual leave

Employer pension contribution up to 7%

Free AA breakdown membership from Day

GP access and wellbeing support

Employee discounts

Job summary

The AA is seeking a Threat & Vulnerability Analyst to join its Cybersecurity team in London (hybrid). You will work with vulnerability data to identify risks, support remediation and help advance the organisation's Continuous Threat Exposure Management program.

You will collaborate across Cybersecurity, Infrastructure, Cloud, Applications and Service Management to turn findings into actionable risk insights and improve how we identify and manage cyber exposure across The AA.

Qualifications

• Understand cyber security vulnerabilities and vulnerability lifecycle (identification, prioritisation, remediation, reporting).
• Knowledge of CVEs, CVSS, exploitability, patching and risk acceptance.
• Ability to analyse technical information, identify trends and turn findings into actions.
• Experience working with technical teams to investigate issues and drive resolution.
• Curiosity about cyber threats and Threat/Vulnerability Management.
• Proactive and self-motivated with ability to manage competing priorities.

Responsibilities

• Analyse and triage vulnerabilities and exposures, prioritise issues for remediation.
• Support Continuous Threat Exposure Management by combining threat intel, exploitability and asset criticality.
• Track remediation activity to resolution, establish ownership, escalate blockers.
• Support external attack surface management and identify exposure across the technology environment.
• Produce clear reporting and MI from vulnerability data.
• Collaborate with Cybersecurity Operations and wider technology teams to improve vulnerability management.

Job description

The AA is seeking a Threat & Vulnerability Analyst to join its Cybersecurity team in London (hybrid). You will work with vulnerability data to identify risks, support remediation and help advance the organisation's Continuous Threat Exposure Management program.

You will collaborate across Cybersecurity, Infrastructure, Cloud, Applications and Service Management to turn findings into actionable risk insights and improve how we identify and manage cyber exposure across The AA.