Vulnerability, Threat & Exposure Management Analyst

ASOS
London
Workplace: OnsiteFull timeFunction: Administration & Executive AssistanceSkills: ["Analytical thinking","Critical-thinking","Problem-solving","Communication","Collaboration"]

Identify and assess technology exposures across ASOS, including vulnerabilities, misconfigurations, identity and privilege weaknesses, exposed assets, cloud risks, and attack paths. Perform risk-based analysis using exploitability, threat intelligence, and business criticality to prioritize what matters most. Partner with engineering and technology teams to agree remediation strategies, track exposures to resolution, improve control effectiveness, and report meaningful exposure metrics.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
ASOS
ASOS
21 hours ago

Vulnerability, Threat & Exposure Management Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Identify and assess technology exposures across ASOS, including vulnerabilities, misconfigurations, identity and privilege weaknesses, exposed assets, cloud risks, and attack paths. Perform risk-based analysis using exploitability, threat intelligence, and business criticality to prioritize what matters most. Partner with engineering and technology teams to agree remediation strategies, track exposures to resolution, improve control effectiveness, and report meaningful exposure metrics.
Location: London
Workplace: Onsite
Employment Type: Full time · Permanent
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Identify and assess technology exposures across ASOS, including vulnerabilities, misconfigurations, identity and privilege weaknesses, exposed assets and services, cloud security risks, and attack paths.
  • •Perform risk-based analysis and prioritisation using exploitability, threat intelligence, attacker behaviour, asset criticality, business context, accessibility, and compensating controls.
  • •Analyse attack paths to understand how weaknesses and trust relationships could combine to enable compromise of critical systems, services, or data.
  • •Apply threat intelligence and exploitation data to determine which threats and exposures are most relevant and where action should be prioritised.
  • •Partner with engineering, product, platform, and infrastructure teams to agree proportionate remediation or mitigation, track significant exposures to resolution, and recommend control improvements.

Pay and Benefits

Perks:Employee DiscountEmployee SamplePaid LeaveAnnual BonusMedical CareFlexible Benefits

Key Requirements

  • •Relevant experience in exposure management, vulnerability management, cloud security, security engineering, threat intelligence, SOC/security operations, or similar roles involving analysis of cyber risk.
  • •Strong understanding of common vulnerabilities, security misconfigurations, and attacker techniques across modern technology environments.
  • •Experience using vulnerability/exposure/cloud security tooling such as Wiz, Microsoft Defender, Nessus, or Qualys (or equivalent).
  • •Knowledge of cloud platforms and cloud-native technologies including virtual machines, containers, and modern application architectures.
  • •Understanding of identity and privilege as part of the attack surface and how identity weaknesses can contribute to attack paths.
Skills:Analytical thinkingCritical-thinkingProblem-solvingCommunicationCollaboration
Languages:English
Tech Stack:WizMicrosoft DefenderNessusQualysVulnerability managementCloud securitySOC/security operationsContainersKubernetesVirtual machinesAPIsAttack paths

Company Brief

ASOS
ASOS plc is a UK-based online fashion and beauty retailer selling thousands of branded and own-label products worldwide through its e-commerce platform, targeting young adult customers with fast-fashion, marketplace third-party brands, and integrated logistics and marketing services.
Industry: E-commerce
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 2000
Glassdoor
Glassdoor: 3.4
WebsiteLinkedInGlassdoor