Threat & Exposure Risk Analyst — Cloud & Apps

ASOS; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Employee discount

Employee sample sales

Annual leave + celebration day

Discretionary bonus

Private medical care

Flexible benefits

Learning opportunities

Job summary

ASOS is seeking a Threat & Exposure Management analyst to help us understand and reduce technology exposures that drive cyber risk. The role involves turning complex security data into clear, risk-based priorities for engineering and technology teams, focusing remediation where it delivers the greatest reduction in exposure.

You’ll work across ASOS’s technology estate, assessing vulnerabilities, misconfigurations, identity weaknesses, cloud risks and attack paths, while applying threat

Qualifications

• Relevant experience as a Vulnerability Analyst, SOC Analyst, or in a similar role.
• Understanding of common vulnerability types and attack techniques.
• Experience with vulnerability management, cloud security or security assessment tooling such as Wiz, Defender, Nessus, Qualys or similar.
• Understanding of enterprise technologies, including cloud platforms, infrastructure, networking and software development practices.
• Ability to leverage threat intelligence to assess vulnerability risk and inform remediation priorities.

Responsibilities

• Identify and assess technology exposures across ASOS, including vulnerabilities, misconfigurations, identity and privilege weaknesses, exposed assets and services, cloud security risks and attack paths.
• Perform risk-based analysis and prioritisation, considering exploitability, threat intelligence, attacker behaviour, asset criticality, business context, accessibility and compensating controls to determine which exposures matter most.
• Analyse attack paths to understand how vulnerabilities, configurations, identities, privileges and trust relationships could combine to enable compromise of critical ASOS systems, services or data.
• Apply threat intelligence and exploitation data to understand which threats and exposures are most relevant to ASOS and where action should be prioritised.
• Assess exposure across modern technology environments, including cloud platforms, applications, APIs, virtual machines, containers, endpoints, identities, networks and supporting infrastructure.

Skills

Vulnerability analysis

Threat intelligence

Cloud security

Security assessment tools

Communication

Risk-based decision making

Tools

Wiz

Microsoft Defender

Nessus

Qualys

Job description

ASOS is seeking a Threat & Exposure Management analyst to help us understand and reduce technology exposures that drive cyber risk. The role involves turning complex security data into clear, risk-based priorities for engineering and technology teams, focusing remediation where it delivers the greatest reduction in exposure.

You’ll work across ASOS’s technology estate, assessing vulnerabilities, misconfigurations, identity weaknesses, cloud risks and attack paths, while applying threat