Cyber Threat Exposure Management Analyst

📋 Description

• Maintain a continuous inventory of Internet-facing assets, shadow IT, domains, subdomains
• Operate EASM/CAASM tooling to surface unowned or unmanaged assets and route them to the correct
• Enrich attack surface findings with threat intelligence, active exploitation trends, and KEV data
• Proactively identify gaps in asset coverage and bring forward improvement ideas without waiting to
• Own the end-to-end vulnerability lifecycle: identification, triage, remediation tracking, and
• Apply CVSS, EPSS, and business context to set remediation SLAs and escalation paths.

🎯 Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent
• 3+ years' experience in cyber security with hands-on exposure to vulnerability management, attack
• Relevant certifications: CompTIA CySA+, CEH, OSCP, CISSP, or equivalent.
• Working knowledge of NIST CSF, ISO 27001, MITRE ATT&CK, and CTEM principles.
• Strong written and verbal communication skills; able to translate technical risk for non-technical
• Hands-on experience with EASM/CAASM, CSPM, or exposure management platforms (beneficial).

🎁 Benefits

• Quarterly Performance-Related Profit Share Scheme
• Strong Career Progression & Mentorship Coaching with dedicated quarterly Pathways programme
• Flexible/remote working with supportive work-life balance
• Financial Wellbeing: Pension, Private Healthcare Cover, Life Assurance, Financial advice, Employee
• Employee Wellbeing: Gym Discounts, Bike to Work, Fitness classes, Mindfulness Workshops, Employee
• Generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave