Vulnerability Management Analyst

La Fosse; Greater London; On-site; GBP 50,000 - 80,000; Full time

Job summary

ASOS is expanding its Cyber Security function and seeks a Vulnerability Analyst to help shift to a modern, risk-led approach to Vulnerability and Exposure Management. You will work across cloud environments and with engineering teams to understand genuine risk beyond CVSS scores, focusing on where exposures matter most and how to remediate effectively.

The role involves collaborating with security and technology teams, using Wiz, and shaping a strategy to mature ASOS's vulnerability and exposure

Qualifications

• Experienced across Vulnerability Management, Exposure Management or Attack Surface Management.
• Ability to look beyond CVSS scores to assess context, exposure and real risk.
• Experience prioritising vulnerabilities across complex tech environments.

Responsibilities

• Develop a modern, risk-led approach to Vulnerability and Exposure Management.
• Identify exposures and potential attack paths; understand attack surface.
• Collaborate with engineering/tech teams to drive remediation and improve security at source.
• Translate findings into prioritised actions for the business.

Skills

Vulnerability Management

Exposure Management

Attack Surface Management

Cloud Environments

Wiz

Risk Assessment

Remediation

Tools

Wiz

Job description

Vulnerability Analyst / Exposure Management

We’ve been exclusively engaged by ASOS to support the continued expansion of its Cyber Security function following a recent injection of investment into the business.

Cyber is a top priority for ASOS, and this is a genuinely exciting time to join the team as they continue to strengthen their cyber capabilities.

We’re looking for a Vulnerability Analyst to help develop a modern, risk-led approach to Vulnerability and Exposure Management.

This isn’t about simply running vulnerability scans, producing reports and measuring success by how many vulnerabilities have been closed. The focus is much broader: understanding where ASOS is genuinely exposed, identifying potential attack paths, interrogating the attack surface and helping the business understand which vulnerabilities and exposures actually represent the greatest risk.

You’ll have the opportunity to work across modern technology and cloud environments, using tools such as Wiz, whilst working closely with engineering and technology teams to help improve security at source.

The right person will be:

• Experienced across Vulnerability Management, Exposure Management or Attack Surface Management.
• Able to go beyond CVSS scores and vulnerability volumes to understand context, exposure and genuine security risk.
• Experienced identifying, assessing and prioritising vulnerabilities across complex technology environments.
• Comfortable investigating attack surface and attack paths to understand how weaknesses could potentially be exploited.
• Experienced working across cloud environments and cloud security tooling such as Wiz.
• Able to work collaboratively with engineering and technology teams to drive remediation and improve security.
• Comfortable interpreting technical security findings and translating them into clear, prioritised actions.
• Interested in improving and automating vulnerability and exposure management processes.
• Naturally curious and inquisitive, with the instinct to dig deeper rather than accepting a finding at face value.
• Someone who enjoys solving complex problems and wants to help build and mature security capability rather than simply operate an existing process.

We’re particularly interested in people who understand that modern Vulnerability Management is ultimately about identifying the exposures that matter most and helping the organisation do something meaningful about them.

For someone who wants to move beyond traditional vulnerability management and help shape a more modern approach to Exposure Management, there has never been a better time to join ASOS.

#CyberSecurity #VulnerabilityManagement #ExposureManagement #AttackSurfaceManagement #CloudSecurity #Wiz #CyberRisk #InfoSec #CyberJobsUK