Threat & Exposure Analyst — Drive Cyber Resilience

Nominet; Oxford; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Early Finish Friday

34-hour working week with full-timepay

30 days annual leave + bank holidays

Bupa private healthcare

Pension scheme

EV on-site charging points

Rewards platform with discounts

Medicash discounts

Annual company bonus

Job summary

Nominet in Oxford is seeking two Threat & Vulnerability Analysts for a hybrid, permanent role. You will own day-to-day vulnerability triage and exposure tracking across cloud, apps, APIs and networks, coordinating with Security Operations, Technology, GRC, suppliers and managed partners to drive remediation.

You will translate threat intelligence into practical actions for prioritisation, reporting and control improvement while challenging unclear evidence to keep remediation moving and protect

Qualifications

• Experience in vulnerability management, threat intelligence, security operations or related cyber security discipline.
• Strong understanding of vulnerability and exposure management processes from discovery to remediation.
• Ability to combine vulnerability data, threat intelligence, asset context and business criticality to identify exposures that create the greatest risk.
• Working knowledge of CVSS, EPSS, known exploited vulnerabilities, MITRE ATT&CK, attack surface management, cloud, application, endpoint, network, identity and third-party risk.

Responsibilities

• Own vulnerability triage and exposure tracking, ensuring weaknesses are assessed, prioritised and driven to closure.
• Monitor vulnerability data, threat intel, vendor advisories and known exploited vulnerabilities to identify emerging risks.
• Assess exposure across cloud, applications, APIs, endpoints, identities, networks, infrastructure, suppliers and exposed services.
• Prioritise remediation using exploitability, external exposure, asset criticality, service impact and business context.
• Collaborate with Technology, Engineering, service owners and suppliers to agree remediation actions.
• Support attack-surface discovery and identify recurring exposure patterns and unmanaged assets.
• Translate threat intelligence into practical actions for prioritisation, threat hunting, detection and control improvement.
• Produce reporting on material exposure, remediation progress and issues requiring escalation.

Skills

Vulnerability management

Threat intelligence

Security operations

Exposure management

Incident response

Stakeholder communication

Tools

Tanium

Microsoft Defender

S1

Snyk

SIEM

EDR/XDR

ServiceNow

Jira

Job description

Nominet in Oxford is seeking two Threat & Vulnerability Analysts for a hybrid, permanent role. You will own day-to-day vulnerability triage and exposure tracking across cloud, apps, APIs and networks, coordinating with Security Operations, Technology, GRC, suppliers and managed partners to drive remediation.

You will translate threat intelligence into practical actions for prioritisation, reporting and control improvement while challenging unclear evidence to keep remediation moving and protect