Attack Surface Management Analyst

Job Description – Attack Surface Management Analyst (17023)

We are easy

Jet – a FTSE listed, £multi-billion low-cost airline that serves tens of millions of customers every single year. If you’re reading this, you have probably already been an easy

Jet customer, and you’ll know that there is no more iconic (or Orange!) travel brand in Europe.

We fly more than 1,207 routes, connecting 38 countries across Europe, and employ more than 18,000 colleagues. We’re on a mission to make low-cost travel easy – and whatever your role here, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service.

Our Promise Behaviours - we are Safe, Bold, Welcoming and Challenging. Four Behaviours. One Spirit. One easy

Jet.

• Have experience in vulnerability management, attack surface management or cybersecurity
• Enjoy solving complex security challenges and reducing cyber risk
• Thrive in a fast‑paced, collaborative environment
• Are passionate about emerging technologies and secure innovation
• Want to make a real impact across a large, complex digital estate

You’ll join the Attack Surface Management (ASM) team within easy

Jet’s Cyber Threat Exposure Management (CTEM) function. The team is focused on identifying, validating and reducing cyber exposures across cloud, on‑prem and third‑party environments.

Working closely with Cyber Threat Intelligence, Advanced Threat Protection, SOC, Engineering and business teams, you’ll help deliver threat‑led vulnerability management and measurable risk reduction across the organisation.

As an Attack Surface Management Analyst, you’ll play a key role in helping easy

Jet identify and reduce cyber exposures across our technology landscape. You’ll turn vulnerability and exposure data into clear, prioritised actions and work closely with stakeholders across technology and the wider business to drive remediation and reduce risk.

You’ll also support the development of vulnerability management capabilities in emerging technology areas, including AI‑enabled systems, helping ensure new technologies are deployed securely and responsibly.

• Identifying, validating and assessing exposures across cloud, on‑prem and third‑party assets
• Triaging vulnerabilities and prioritising remediation based on threat, exploitability and business impact
• Partnering with IT, Engineering and business teams to drive remediation through to resolution
• Tracking remediation activity and helping remove blockers to progress
• Supporting analysis of recurring vulnerabilities and exposure trends to reduce repeat issues
• Helping improve secure build and deployment practices across the software development lifecycle
• Supporting the identification and management of vulnerabilities within AI‑enabled systems and supporting pipelines
• Assisting with vulnerability disclosure programme submissions and remediation workflows
• Producing clear reporting and dashboards on vulnerability trends and remediation progress
• Supporting the effective use and optimisation of vulnerability management and CNAPP tooling
• Collaborating across Cyber Threat Exposure Management teams to strengthen detection and response capabilities

• Understanding of cloud environments including AWS, Azure and GCP, and associated security risks
• Knowledge of common security exposures such as misconfiguration, identity risk, secrets exposure and API security
• Familiarity with vulnerability management tooling and/or CNAPP platforms
• Strong analytical, communication and problem‑solving skills
• Understanding of vulnerability scoring, prioritisation and remediation processes
• Ability to build strong working relationships across multidisciplinary teams
• A proactive mindset and confidence working in a dynamic environment

• Experience with in vulnerability management, attack surface management or a related cybersecurity field
• Knowledge of frameworks such as MITRE ATT&CK and Cyber Kill Chain
• Awareness of security and compliance standards such as PCI‑DSS
• Relevant security certifications including GIAC, AWS or CompTIA
• Experie…