Attack Surface Management Analyst

Job Description – Attack Surface Management Analyst (17023)

We are easyJet – a FTSE listed, £multi-billion low-cost airline that serves tens of millions of customers every single year. If you’re reading this, you have probably already been an easyJet customer, and you’ll know that there is no more iconic (or Orange!) travel brand in Europe.

We fly more than 1,207 routes, connecting 38 countries across Europe, and employ more than 18,000 colleagues. We’re on a mission to make low-cost travel easy – and whatever your role here, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service.

What makes us easyJet?

Our Promise Behaviours - we are Safe, Bold, Welcoming and Challenging. Four Behaviours. One Spirit. One easyJet.

Read on if you

• Have experience in vulnerability management, attack surface management or cybersecurity
• Enjoy solving complex security challenges and reducing cyber risk
• Thrive in a fast‑paced, collaborative environment
• Are passionate about emerging technologies and secure innovation
• Want to make a real impact across a large, complex digital estate

The Team

You’ll join the Attack Surface Management (ASM) team within easyJet’s Cyber Threat Exposure Management (CTEM) function. The team is focused on identifying, validating and reducing cyber exposures across cloud, on‑prem and third‑party environments.

Working closely with Cyber Threat Intelligence, Advanced Threat Protection, SOC, Engineering and business teams, you’ll help deliver threat‑led vulnerability management and measurable risk reduction across the organisation.

The Role

As an Attack Surface Management Analyst, you’ll play a key role in helping easyJet identify and reduce cyber exposures across our technology landscape. You’ll turn vulnerability and exposure data into clear, prioritised actions and work closely with stakeholders across technology and the wider business to drive remediation and reduce risk.

You’ll also support the development of vulnerability management capabilities in emerging technology areas, including AI‑enabled systems, helping ensure new technologies are deployed securely and responsibly.

Key responsibilities include:

• Identifying, validating and assessing exposures across cloud, on‑prem and third‑party assets
• Triaging vulnerabilities and prioritising remediation based on threat, exploitability and business impact
• Partnering with IT, Engineering and business teams to drive remediation through to resolution
• Tracking remediation activity and helping remove blockers to progress
• Supporting analysis of recurring vulnerabilities and exposure trends to reduce repeat issues
• Helping improve secure build and deployment practices across the software development lifecycle
• Supporting the identification and management of vulnerabilities within AI‑enabled systems and supporting pipelines
• Assisting with vulnerability disclosure programme submissions and remediation workflows
• Producing clear reporting and dashboards on vulnerability trends and remediation progress
• Supporting the effective use and optimisation of vulnerability management and CNAPP tooling
• Collaborating across Cyber Threat Exposure Management teams to strengthen detection and response capabilities

Requirements of the Role

What we’re looking for

• Understanding of cloud environments including AWS, Azure and GCP, and associated security risks
• Knowledge of common security exposures such as misconfiguration, identity risk, secrets exposure and API security
• Familiarity with vulnerability management tooling and/or CNAPP platforms
• Strong analytical, communication and problem‑solving skills
• Understanding of vulnerability scoring, prioritisation and remediation processes
• Ability to build strong working relationships across multidisciplinary teams
• A proactive mindset and confidence working in a dynamic environment

Desirable experience

• Experience within vulnerability management, attack surface management or a related cybersecurity field
• Knowledge of frameworks such as MITRE ATT&CK and Cyber Kill Chain
• Awareness of security and compliance standards such as PCI‑DSS
• Relevant security certifications including GIAC, AWS or CompTIA
• Experience with application security testing tools such as SAST or DAST

What you’ll get in return

• Up to 20% bonus
• 25 days holiday
• BAYE, SAYE and Performance Share schemes
• PMI
• Life assurance
• Flexible benefits package
• Excellent staff travel benefits

Practicalities

This is a full‑time position. We support hybrid working and spend time together as a team in our Luton HQ offices.

Reasonable adjustments

At easyJet, we are dedicated to fostering an inclusive workplace that reflects the diverse customers we serve across Europe. We welcome candidates from all backgrounds. If you require specific adjustments or support during the application or recruitment process, such as extra time for assessments or accessible interview locations, please contact us at ma.recruitment@easyjet.com. We are committed to providing reasonable adjustments throughout the recruitment process to ensure accessibility and accommodation.

#J-18808-Ljbffr