About this role
About AXA
AXA is a global leader in insurance and financial services, dedicated to helping customers protect what matters most to them. As the sixth-largest insurance company in the world, we provide a wide range of services, including health, car, home, and business insurance. We support millions of customers worldwide, helping them navigate life's uncertainties with confidence.
AXA UK Support Functions look after our three customer-facing business units, providing the infrastructure and expertise to make sure we can be there for our customers.
Job Overview
We have a new opportunity for an Incident Response Analyst to join our Security and Resilience function in AXA UK. You’ll respond to Cyber Security incidents performing forensic investigations and providing cyber threat intelligence services.
Key Responsibilities
- Acting as an escalation point for all UK security incidents, ensuring incidents are managed in accordance with UK and Group incident management requirements
- Performing in-depth analysis of security events utilising a range of security tools
- Supporting the wider team in process improvement, detection content tuning, and threat analysis
- Working with a range of Security and Risk colleagues to ensure all identified risks are identified and managed appropriately
Work Arrangements
At AXA we work smart, empowering our people to balance their time between home and the office in a way that works best for them, their team and our customers. You'll work at least two days a week (40%) away from home, moving to three days a week (60%) from December 2026. Away from home means attending the office, visiting clients or attending industry events. We’re also happy to consider flexible working arrangements, which you can discuss with Talent Acquisition.
Your Skills & Experience
- Hands on experience of security incident handling
- Knowledge of relevant computer forensics, incident response and e-discovery tools, EDR, NDR, UEBA, honeypots, data loss prevention, SIEM, and Log Managers
- Excellent time management skills, including the ability to manage a demanding and variable workload with tight deadlines
- Understanding of common protocol behaviours and comfortable with packet analysis is desirable
- Ability to negotiate and resolve conflict
- Good analytical skills and the ability to clearly identify key issues
- Relevant professional qualifications e.g. GIAC CGIH and SSCP is desirable
How To Apply
To apply, click on the ‘apply now’ button, you’ll then need to log in or create a profile to submit your CV. We’re proud to be an Equal Opportunities Employer and don’t discriminate against employees or potential employees based on protected characteristics. If you have a long-term condition or disability and require adjustments during the application or interview process, we’re proud to offer access to the AXA Accessibility Concierge. For our support, please send an email to lauren.standen@axa-insurance.co.uk.
About cyber security & digital forensics roles for ex-police
Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.
See all cyber security & digital forensics jobs in Leeds →Why this fits a police background — match score 65/100
- Intelligence & OSINT
- Incident command & response
- Investigative casework
What cyber security & digital forensics roles pay ex-police
Advertised UK ranges, editorial estimates reviewed July 2026
| Digital forensics analyst | £32,000–£45,000 |
| DFIR consultant | £45,000–£65,000 |
| Senior forensics / IR specialist | £60,000–£80,000 |
| Threat-intelligence specialist | £55,000–£80,000 |