> Markdown version of [/jobs/ext/3100371-security-analyst](https://www.wearedevelopers.com/jobs/ext/3100371-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Analyst - **Company:** AXA UK plc - **Location:** West Northamptonshire, UK - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Proxy Servers, Server Applications, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Software Vulnerability Management, Web Applications, Google Cloud, Cloud Platform System, Software Security, Mitre Att&ck, Firewalls (Computer Science), Information Technology - **Published:** September 27, 2026 - **Apply:** https://www.apply4u.co.uk/jobs/security-analyst/48631205 ## About the Role vulnerabilities, ideally spanning cloud environments (AWS, Azure, GCP), infrastructure components such as web and application servers, firewalls, proxies and operating systems and application code security. Experience in cloud security engineering, architecture or general IT infrastructure is advantageous. Strong analytical and problem-solving skills, with the ability to dig into technical detail. Confidence to challenge ambiguity and ask the right questions. A genuine curiosity about how systems can be broken - and how to make them more resilient. Comfortable working with industry frameworks, including threat behaviour modelling e.g. MITRE ATT&CK, Vulnerability management e.g. CVSS, Penetration testing standards e.g. CREST, CBEST, TIGER and Security frameworks e.g. NIST, ISO 27001/27002. OSCP or equivalent practical penetration testing certification or an MSc in Cyber Security or Information Technology is desirable but not essential. We're proud to be an Equal Opportunities Employer and don't discriminate against employees or potential employees based on protected characteristics. If you have a long-term condition or disability and require adjustments during the application or interview process, we're proud to offer access to the AXA Accessibility Concierge. #LI-Hybrid #J-18808-Ljbffr ## Description requests with the right technical teams. Producing clear, meaningful metrics and reports for executive steering groups, translating complex technical findings into actionable insight for senior audiences. Constantly looking for opportunities to sharpen, simplify, and scale our processes - your ideas will be welcomed and acted upon. Work arrangements At AXA we work smart, empowering our people to balance their time between home and the office in a way that works best for them, their team and our customers. You'll work at least two days a week (40%) away from home, moving to three days a week (60%) from December 2026. Away from home means attending the office, visiting clients or attending industry events. We're also happy to consider flexible working arrangements, which you can discuss with Talent Acquisition. Your skills & experience Prior hands-on technical penetration testing experience (internal, external, web application, cloud) A deep understanding of IT systems and ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Exploring the Power of gRPC-Gateway for Writing RESTful Services](https://www.wearedevelopers.com/videos/2072-exploring-the-power-of-grpc-gateway-for-writing-restful-services) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Stop Using Node.js Like It’s 2020! - Alfonso Graziano](https://www.wearedevelopers.com/videos/1863-stop-using-node-js-like-it-s-2020-alfonso-graziano) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)