Attack surface management analyst

Job Description – Attack Surface Management Analyst (17023)
We are easyJet – a FTSE listed, £multi-billion low-cost airline that serves tens of millions of customers every single year. If you’re reading this, you have probably already been an easyJet customer, and you’ll know that there is no more iconic (or Orange!) travel brand in Europe.

We fly more than 1,207 routes, connecting 38 countries across Europe, and employ more than 18,000 colleagues. We’re on a mission to make low-cost travel easy – and whatever your role here, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service.

What makes us easyJet?
Our Promise Behaviours - we are Safe, Bold, Welcoming and Challenging. Four Behaviours. One Spirit. One easyJet.

Read on if you

Have experience in vulnerability management, attack surface management or cybersecurity

Enjoy solving complex security challenges and reducing cyber risk

Thrive in a fast‑paced, collaborative environment

Are passionate about emerging technologies and secure innovation

Want to make a real impact across a large, complex digital estate

The Team
You’ll join the Attack Surface Management (ASM) team within easyJet’s Cyber Threat Exposure Management (CTEM) function. The team is focused on identifying, validating and reducing cyber exposures across cloud, on‑prem and third‑party environments.

Working closely with Cyber Threat Intelligence, Advanced Threat Protection, SOC, Engineering and business teams, you’ll help deliver threat‑led vulnerability management and measurable risk reduction across the organisation.

The Role
As an Attack Surface Management Analyst, you’ll play a key role in helping easyJet identify and reduce cyber exposures across our technology landscape. You’ll turn vulnerability and exposure data into clear, prioritised actions and work closely with stakeholders across technology and the wider business to drive remediation and reduce risk.

You’ll also support the development of vulnerability management capabilities in emerging technology areas, including AI‑enabled systems, helping ensure new technologies are deployed securely and responsibly.

Key responsibilities include:

Identifying, validating and assessing exposures across cloud, on‑prem and third‑party assets

Triaging vulnerabilities and prioritising remediation based on threat, exploitability and business impact

Partnering with IT, Engineering and business teams to drive remediation through to resolution

Tracking remediation activity and helping remove blockers to progress

Supporting analysis of recurring vulnerabilities and exposure trends to reduce repeat issues

Helping improve secure build and deployment practices across the software development lifecycle

Supporting the identification and management of vulnerabilities within AI‑enabled systems and supporting pipelines

Assisting with vulnerability disclosure programme submissions and remediation workflows

Producing clear reporting and dashboards on vulnerability trends and remediation progress

Supporting the effective use and optimisation of vulnerability management and CNAPP tooling

Collaborating across Cyber Threat Exposure Management teams to strengthen detection and response capabilities

Requirements of the Role
What we’re looking for

Understanding of cloud environments including AWS, Azure and GCP, and associated security risks

Knowledge of common security exposures such as misconfiguration, identity risk, secrets exposure and API security

Familiarity with vulnerability management tooling and/or CNAPP platforms

Strong analytical, communication and problem‑solving skills

Understanding of vulnerability scoring, prioritisation and remediation processes

Ability to build strong working relationships across multidisciplinary teams

A proactive mindset and confidence working in a dynamic environment

Desirable experience

Experience within vulnerability management, attack surface management or a related cybersecurity field

Knowledge of frameworks such as MITRE ATT&CK and Cyber Kill Chain

Awareness of security and compliance standards such as PCI‑DSS

Relevant security certifications including GIAC, AWS or CompTIA

Experience with application security testing tools such as SAST or DAST

What you’ll get in return

Up to 20% bonus

25 days holiday

BAYE, SAYE and Performance Share schemes

PMI

Life assurance

Flexible benefits package

Excellent staff travel benefits

Practicalities
This is a full‑time position. We support hybrid working and spend time together as a team in our Luton HQ offices.

Reasonable adjustments
At easyJet, we are dedicated to fostering an inclusive workplace that reflects the diverse customers we serve across Europe. We welcome candidates from all backgrounds. If you require specific adjustments or support during the application or recruitment process, such as extra time for assessments or accessible interview locations, please contact us at ma.recruitment@easyjet.com. We are committed to providing reasonable adjustments throughout the recruitment process to ensure accessibility and accommodation.

#J-18808-Ljbffr