Threat & Exposure Risk Analyst — Prioritize & Reduce Risk

SmartRecruiters, Inc.; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Discretionary bonus

Private medical care

Flexible benefits

Learning opportunities

Employee sample sales

Annual leave + celebration day

Job summary

ASOS is seeking a Vulnerability, Threat & Exposure Management analyst to understand and reduce technology exposures driving cyber risk. You will treat vulnerabilities in context of misconfigurations, identity weaknesses and cloud risks, translating technical data into risk-based priorities for remediation.

You’ll work across ASOS’s tech estate to identify exposures, assess exploitability, and guide engineering teams on actions that reduce risk.

Qualifications

• Relevant experience as Vulnerability Analyst, SOC Analyst or similar role.
• Experience with vulnerability management, cloud security or security assessment tooling.
• Understanding of enterprise tech including cloud, networks and software dev practices.
• Ability to leverage threat intelligence to inform remediation priorities.
• Understanding of container and Kubernetes security is desirable.
• Strong risk-based decision making and cyber risk management.

Responsibilities

• Identify and assess technology exposures across ASOS, including vulnerabilities, misconfigurations, identity and privilege weaknesses, exposed assets and services, cloud security risks and attack paths.
• Perform risk-based analysis and prioritisation considering exploitability, threat intel, asset criticality and business context.
• Analyse attack paths to understand how weaknesses could enable compromise of critical ASOS systems.
• Apply threat intelligence and exploitation data to prioritise actions for remediation.
• Assess exposure across cloud platforms, applications, APIs, VMs, containers, endpoints, identities and networks.
• Support continuous attack-surface discovery and identify unknown or exposed assets.
• Collaborate with engineering and product teams to agree proportionate remediation strategies.
• Track exposures through to resolution and escalate material risk when needed.
• Identify recurring exposure patterns and address root causes to reduce classes of exposure.

Skills

Vulnerability analysis

SOC analysis

Threat intelligence

Cloud security

Kubernetes security

Risk management

Communication skills

Problem solving

Curiosity

Tools

Wiz

Microsoft Defender

Nessus

Qualys

Job description

ASOS is seeking a Vulnerability, Threat & Exposure Management analyst to understand and reduce technology exposures driving cyber risk. You will treat vulnerabilities in context of misconfigurations, identity weaknesses and cloud risks, translating technical data into risk-based priorities for remediation.

You’ll work across ASOS’s tech estate to identify exposures, assess exploitability, and guide engineering teams on actions that reduce risk.