Cyber Threat & Vulnerability Analyst

Location: Basingstoke (Hybrid working, 3 office days per week) *plus some monthly travel to our central London office.

Employment Type: Permanent, Full Time

Why Join Us?

• Annual bonus opportunity
• Shape and embed The AA’s critical data governance operating model across a large, complex organisation
• Build a meaningful Group wide capability with strong executive sponsorship and the opportunity to influence how data is governed from an early stage
• Play a key role in ensuring trusted, high-quality data supports better decision making, customer outcomes and our growing Data and AI ambitions

For over a century, The AA has been keeping Britain moving. Today, millions of drivers trust us to be there when it matters most, and we're equally committed to supporting the people who make that possible. With a 4.5-star Glassdoor rating, we've built a culture where colleagues are empowered to grow, collaborate and make a real impact for our customers on every journey. Which has been recognised by Sunday Times “Best Places to Work” for the last two years.

This is the Job

We’re looking for a Threat & Vulnerability Analyst to join our Cybersecurity team and help us understand, prioritise and reduce cyber exposure across The AA. You’ll work with vulnerability and threat data to identify where our greatest risks sit, support remediation activity and help us continue developing our approach to Continuous Threat Exposure Management.

This is a hands-on role with plenty of opportunity to learn and develop. You might already work in vulnerability management, or you could be building your cyber career within a SOC, End User Computing, infrastructure, technical support or another security focused environment and be ready to specialise. We’re interested in your understanding of vulnerabilities and security testing, your curiosity about how attackers exploit weaknesses and, importantly, your motivation to develop your expertise.

Working across Cybersecurity, Infrastructure, Cloud, Applications, End User Computing, Service Management and Risk, you’ll turn technical findings into meaningful insight and help ensure vulnerabilities are prioritised according to their real-world risk. You’ll also gain exposure to modern vulnerability and exposure management tools and help us strengthen how we identify, track and manage cyber exposure across the organisation.

Key Responsibilities

• Analyse and triage vulnerabilities and exposures, helping validate findings and identify the issues that require attention
• Support our Continuous Threat Exposure Management capability, bringing together threat intelligence, exploitability, asset criticality and business context to help prioritise risk
• Track vulnerabilities and remediation activity through to resolution, working with technical teams to establish ownership and escalate blockers where needed
• Support external attack surface management and help identify potential exposure across our technology environment
• Analyse vulnerability data to identify trends, gaps and emerging risks, producing clear reporting and management information
• Work closely with Cybersecurity Operations and wider technology teams to support critical vulnerability response and continually improve our approach to vulnerability management

What Do I Need?

You’ll Bring

• A good understanding of cyber security vulnerabilities and the vulnerability management lifecycle, including identification, prioritisation, remediation and reporting
• An understanding of vulnerability and security testing concepts, such as CVEs, CVSS, exploitability, patching, compensating controls and risk acceptance
• The ability to analyse technical information or data, identify trends and priorities, and turn findings into clear actions
• Experience working with technical teams to investigate issues, coordinate activity or track actions through to resolution
• Curiosity about cyber threats and how vulnerabilities can be exploited, combined with enthusiasm for developing your knowledge of Threat and Vulnerability Management
• A proactive and self-motivated approach, with the ability to manage competing priorities and work effectively in a fast-paced environment

Nice to Have

• Exposure to vulnerability or exposure management technologies such as Wiz, Tenable, Qualys, Microsoft Defender Vulnerability Management, Defender Advanced Threat Hunting, Burp Suite or similar
• Familiarity with external attack surface management, penetration testing, security testing, threat intelligence or Red or Purple Teaming
• Experience with tools such as ServiceNow, Jira, Power BI, KQL, PowerShell or Python, or relevant cyber security training or certifications

Belonging at The AA

At The AA, we value the unique perspectives, experiences and ideas that our people bring. We've nurtured a workplace where everyone feels valued, respected and empowered to do their best work.

Through our employee communities and inclusion initiatives, we’ve created opportunities for people to connect, share experiences and influence positive change across the business. This is a place where your voice matters and where you can belong, grow and succeed.

Driven by People, Rewarded by Benefits

We believe in rewarding our people. That's why we offer a comprehensive benefits package including;

• 25 days' annual leave plus bank holidays, the option to buy additional holiday
• Up to 7% employer pension contribution
• Free AA breakdown membership from Day One with 50% discount for family and friends, discounts on AA products including car and home insurance
• 24/7 GP access and wellbeing support for you and your family
• A wide range of employee discounts, including our popular car salary sacrifice scheme