Lead External Attack Surface Management Analyst

Job Title: Lead External Attack Surface Management Analyst

Location: Preston or Frimley (Hybrid/Flexible Working Available)

Salary: Up to £70,000 + 10% Bonus (SC Clearance – UK Eyes Only)

About the Role:

Are you passionate about cyber defense and looking to make a real impact on the security of critical national infrastructure? We’re seeking a Lead External Attack Surface Management Analyst to join a leading Cyber Operations team. In this role, you’ll be responsible for safeguarding global perimeter assets, identifying vulnerabilities, and leading efforts to mitigate security risks. As a subject matter expert (SME), you’ll help shape the future of our attack surface management strategies while mentoring a talented team.

Key Responsibilities:

• Maintain the Global Attack Surface Management service, ensuring discovery and governance of Shadow-IT and external assets
• Provide SME support during complex purple team operations, focusing on attack surface vulnerabilities
• Lead external attack surface assessments, identifying and addressing perimeter risks in line with policy
• Continuously monitor and test security controls to protect the companies global presence
• Implement high standards and best practices within Attack Surface Management and Active Defence
• Mentor team members and support the Active Defence Manager with future operational planning
• Act as an SME on emerging cyber threats

Skills & Experience Required:

• Deep technical knowledge of VPNs, Firewalls, IDS/IPS, Endpoint Protection, Networking, Cloud, CDNs, and Vulnerability Management
• Strong background in cyber security, networks, and operating systems
• Analytical expertise with the ability to interpret complex data sets, drawing conclusions and providing recommendations
• In-depth understanding of the current threat landscape, including threat intelligence and mitigation strategies
• Proven experience with the MITRE ATT&CK framework

About the Cyber Operations Team:

The Cyber Operations Team plays a vital role in protecting the company and its employees from cyber threats, indirectly defending those who protect us—our armed forces. Working across Threat Intelligence, Detection, Incident Response, and Active Defence, we are continually evolving to maintain a world-class cyber operations capability.

Ready to Make a Difference?

Apply today to become part of a dynamic and innovative team that protects the future of defense technology!

#CyberSecurity #AttackSurfaceManagement #SecurityAnalyst #BAESystems #HybridWorking #CyberJobs #ExternalAttackSurface