Threat & Exposure Management Analyst

ASOS
London
Workplace: OnsiteFull timeFunction: Administration & Executive AssistanceSkills: ["Analytical thinking","Critical thinking","Communication","Collaboration","Problem-solving"]

Help ASOS understand and reduce technology exposures that contribute to material cyber risk. You’ll assess vulnerabilities, misconfigurations, identity and privilege weaknesses, cloud security risks, exposed assets, and attack paths using threat intelligence, exploitability, and business criticality. Collaborate with engineering, product, platform, and infrastructure teams to prioritize and track remediation outcomes, measure exposure metrics, and continuously improve threat & exposure management capability across modern environments.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
ASOS
ASOS
2 days ago

Threat & Exposure Management Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 13 hours agoStatus: Live

Job Summary

Help ASOS understand and reduce technology exposures that contribute to material cyber risk. You’ll assess vulnerabilities, misconfigurations, identity and privilege weaknesses, cloud security risks, exposed assets, and attack paths using threat intelligence, exploitability, and business criticality. Collaborate with engineering, product, platform, and infrastructure teams to prioritize and track remediation outcomes, measure exposure metrics, and continuously improve threat & exposure management capability across modern environments.
Location: London
Workplace: Onsite
Employment Type: Full time · Permanent
Job Function: Administration & Executive Assistance
Seniority: Entry level

Key Responsibilities

  • •Identify and assess technology exposures across ASOS, including vulnerabilities, misconfigurations, identity and privilege weaknesses, exposed assets and services, cloud security risks, and attack paths.
  • •Perform risk-based analysis and prioritisation using exploitability, threat intelligence, attacker behaviour, asset criticality, business context, accessibility, and compensating controls.
  • •Analyse attack paths to understand how weaknesses and trust relationships could combine to enable compromise of critical ASOS systems, services, or data.
  • •Apply threat intelligence and exploitation data to determine which threats and exposures are most relevant, and support continuous attack-surface discovery.
  • •Partner with engineering and technology teams to agree remediation/mitigation strategies, track exposures through resolution, and translate findings into risk insights and metrics.

Pay and Benefits

Perks:Paid LeavePrivate Medical

Key Requirements

  • •Relevant experience in exposure management, vulnerability management, cloud security, security engineering, threat intelligence, SOC/security operations, or similar cyber risk analysis roles.
  • •Strong understanding of common vulnerabilities, security misconfigurations, and attacker techniques across modern technology environments.
  • •Experience using vulnerability, exposure, cloud security, or security assessment tooling such as Wiz, Microsoft Defender, Nessus, Qualys, or equivalents.
  • •Understanding of cloud platforms and cloud-native technologies, including virtual machines, containers, and modern application architectures.
  • •Ability to make risk-based decisions and explain complex technical issues clearly to both technical and non-technical audiences.
Skills:Analytical thinkingCritical thinkingCommunicationCollaborationProblem-solving
Languages:English
Tech Stack:WizMicrosoft DefenderNessusQualysCloud platformsVirtual machinesContainersKubernetesAPIs

Company Brief

ASOS
ASOS plc is a UK-based online fashion and beauty retailer selling thousands of branded and own-label products worldwide through its e-commerce platform, targeting young adult customers with fast-fashion, marketplace third-party brands, and integrated logistics and marketing services.
Industry: E-commerce
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 2000
Glassdoor
Glassdoor: 3.4
WebsiteLinkedInGlassdoor