Cyber Threat & Vulnerability Analyst

Location: Basingstoke (Hybrid working, 3 office days per week)
* plus some monthly travel to our central London office.

Employment Type: Permanent, Full Time

Why Join Us?

• Annual bonus opportunity
• Shape and embed The AA’s critical data governance operating model across a large, complex organisation
• Build a meaningful Group wide capability with strong executive sponsorship and the opportunity to influence how data is governed from an early stage
• Play a key role in ensuring trusted, high-quality data supports better decision making, customer outcomes and our growing Data and AI ambitions

For over a century, The AA has been keeping Britain moving. Today, millions of drivers trust us to be there when it matters most, and we're equally committed to supporting the people who make that possible. With a 4.5-star Glassdoor rating, we've built a culture where colleagues are empowered to grow, collaborate and make a real impact for our customers on every journey.

Which has been recognised by Sunday Times "Best Places to Work" for the last two years.

This is the Job

We're looking for a Threat & Vulnerability Analyst to join our Cybersecurity team and help us understand, prioritise and reduce cyber exposure across The AA. You'll work with vulnerability and threat data to identify where our greatest risks sit, support remediation activity and help us continue developing our approach to Continuous Threat Exposure Management.

This is a hands-on role with plenty of opportunity to learn and develop. You might already work in vulnerability management, or you could be building your cyber career within a SOC, End User Computing, infrastructure, technical support or another security focused environment and be ready to specialise. We're interested in your understanding of vulnerabilities and security testing, your curiosity about how attackers exploit weaknesses and, importantly, your motivation to develop your expertise.

Working across Cybersecurity, Infrastructure, Cloud, Applications, End User Computing, Service Management and Risk, you'll turn technical findings into meaningful insight and help ensure vulnerabilities are prioritised according to their real-world risk. You'll also gain exposure to modern vulnerability and exposure management tools and help us strengthen how we identify, track and manage cyber exposure across the organisation.

Key Responsibilities

• Analyse and triage vulnerabilities and exposures, helping validate findings and identify the issues that require attention
• Support our Continuous Threat Exposure Management capability, bringing together threat intelligence, exploitability, asset criticality and business context to help prioritise risk
• Track vulnerabilities and remediation activity through to resolution, working with technical teams to establish ownership and elevate blockers where needed
• Support external attack surface management and help identify potential exposure across our technology environment
• Analyse vulnerability data to identify trends, gaps and emerging risks, producing clear reporting and management information
• Work closely with Cybersecurity Operations and wider technology teams to support critical vulnerability response and continually improve our approach to vulnerability management

What Do I Need?

You’ll Bring

• A good understanding of cyber security vulnerabilities and the vulnerability management lifecycle, including identification, prioritisation, remediation and reporting
• An understanding of vulnerability and security testing concepts, such as CVEs, CVSS, exploitability, patching, compensating controls and risk acceptance
• The ability to analyse technical information or data, identify trends and priorities, and turn findings into clear actions
• Experience working with…