Threat & Exposure Management Analyst

ASOS.com; Greater London; On-site; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Employee discount

Sample sales

Annual leave + celebration day

Discretionary bonus

Private medical care

Flexible benefits

Learning opportunities

Job summary

ASOS.com is seeking a Vulnerability, Threat & Exposure Management analyst to help reduce technology exposures driving cyber risk. You will translate technical data into risk-based priorities for engineering and technology teams, guiding remediation based on threat intelligence and business criticality.

This analytical, collaborative role spans ASOS’s technology estate, assessing exposure across cloud platforms, applications, and networks, and partnering with multiple teams to implement

Qualifications

• Experience as Vulnerability Analyst, SOC Analyst, or similar role.
• Understanding of vulnerability types and attack techniques.
• Experience with vulnerability management, cloud security or security assessment tooling.
• Understanding of enterprise technologies including cloud, networks and software development practices.
• Ability to use threat intelligence to inform remediation priorities.
• Knowledge of container and Kubernetes security is desirable.
• Understanding of cyber security risk management and risk-based decision making.
• Strong written and verbal communication skills.

Responsibilities

• Identify and assess exposure across ASOS including vulnerabilities, misconfigurations, cloud risks and attack paths.
• Perform risk-based analysis considering exploitability, threat intel, asset criticality and business context.
• Analyse attack paths to understand how weaknesses could enable compromise of ASOS systems.
• Apply threat intelligence to prioritise actions and reduce exposure.
• Assess exposure across cloud platforms, applications, APIs, VMs, containers and networks.
• Support continuous attack-surface discovery and identify unknown assets and services.
• Collaborate with engineering and infrastructure teams to agree proportionate remediation strategies.
• Track exposures through to resolution and escalate material risk when needed.
• Identify recurrent exposure patterns and address root causes to reduce classes of exposure.
• Assess effectiveness of controls and recommend improvements.
• Validate remediation outcomes with technical evidence of risk reduction.
• Translate findings into clear risk insights for technical and non-technical stakeholders.
• Contribute to exposure metrics and reporting showing changes in organisational risk.
• Contribute to continuous improvement of ASOS’s Threat & Exposure Management capability.
• Promote secure-by-design and proportionate security practices across teams.

Skills

Vulnerability analysis

Threat intelligence

Risk assessment

Security governance

Communication

Tools

Wiz

Microsoft Defender

Nessus

Qualys

Job description

ASOS.com is seeking a Vulnerability, Threat & Exposure Management analyst to help reduce technology exposures driving cyber risk. You will translate technical data into risk-based priorities for engineering and technology teams, guiding remediation based on threat intelligence and business criticality.

This analytical, collaborative role spans ASOS’s technology estate, assessing exposure across cloud platforms, applications, and networks, and partnering with multiple teams to implement