We are looking for a Senior Cyber Analyst specialising in Threat Exposure Management for AppSec and AI within the ‘Identify’ Capability.
The ‘Identify’ capability focusses on managing the attack surface and continually evaluating the accessibility, exposure, and exploitability of our environments and assets. This involves in supporting building and running all the services (technology, people and process) to perform Threat Exposure Management along with responsibility for managing the output and working with stakeholders to close any discovered issues.
As part of the ‘Identify’ capability within the Threat Exposure Management function, the Senior Cyber Analyst – Threat Exposure Management has the responsibility for overseeing the continual evolution of the organisation’s threat exposure management lifecycle and reduction programmes within a given scope, and reports to the Cyber Manager – Threat Exposure Management. This role ensures that exposures across the Code, Application and AI environments are proactively identified, prioritised, validated,
and remediated in alignment with business risk and operational resilience requirements.
The successful candidate must demonstrate a strong track record in performing in-depth technical assessments, and delivering transparent, expert insights on identified vulnerabilities and exposures, including validation, prioritisation, and contextual analysis. They will be responsible for helping to establish and refine best practices for threat exposure management and vulnerability management, whilst effectively influencing stakeholders across the organisation. The role requires advanced technical expertise in exposure analysis and defensive and offensive security, with the ability to lead detailed technical discussions and perform complex investigations across Identity technologies.
Key Responsibilities:
> Threat Exposure Management and Vulnerability Management
Perform detailed analysis of vulnerabilities and exposures across the source-cod