Vulnerability Management Analyst

Vulnerability Analyst / Exposure Management

We’ve been exclusively engaged by ASOS to support the continued expansion of its Cyber Security function following a recent injection of investment into the business.

Cyber is a top priority for ASOS, and this is a genuinely exciting time to join the team as they continue to strengthen their cyber capabilities.

We’re looking for a Vulnerability Analyst to help develop a modern, risk-led approach to Vulnerability and Exposure Management.

This isn’t about simply running vulnerability scans, producing reports and measuring success by how many vulnerabilities have been closed. The focus is much broader: understanding where ASOS is genuinely exposed, identifying potential attack paths, interrogating the attack surface and helping the business understand which vulnerabilities and exposures actually represent the greatest risk.

You’ll have the opportunity to work across modern technology and cloud environments, using tools such as Wiz, whilst working closely with engineering and technology teams to help improve security at source.

The right person will be:

• Experienced across Vulnerability Management, Exposure Management or Attack Surface Management.
• Able to go beyond CVSS scores and vulnerability volumes to understand context, exposure and genuine security risk.
• Experienced identifying, assessing and prioritising vulnerabilities across complex technology environments.
• Comfortable investigating attack surface and attack paths to understand how weaknesses could potentially be exploited.
• Experienced working across cloud environments and cloud security tooling such as Wiz.
• Able to work collaboratively with engineering and technology teams to drive remediation and improve security.
• Comfortable interpreting technical security findings and translating them into clear, prioritised actions.
• Interested in improving and automating vulnerability and exposure management processes.
• Naturally curious and inquisitive, with the instinct to dig deeper rather than accepting a finding at face value.
• Someone who enjoys solving complex problems and wants to help build and mature security capability rather than simply operate an existing process.

We’re particularly interested in people who understand that modern Vulnerability Management is ultimately about identifying the exposures that matter most and helping the organisation do something meaningful about them.

For someone who wants to move beyond traditional vulnerability management and help shape a more modern approach to Exposure Management, there has never been a better time to join ASOS.

#CyberSecurity #VulnerabilityManagement #ExposureManagement #AttackSurfaceManagement #CloudSecurity #Wiz #CyberRisk #InfoSec #CyberJobsUK

#J-18808-Ljbffr