Attack Surface Research Analyst
We are seeking an Attack Surface Research Analyst to identify, assess and monitor the digital assets and technologies that could expose an organisation to cyber risk. You will research internet-facing infrastructure, domains, subdomains, cloud services, applications, APIs and third-party dependencies, helping to maintain an accurate and continuously evolving view of the external attack surface. Your analysis will support the prioritisation of vulnerabilities and inform practical risk-reduction activity across technical and business teams.
Responsibilities will include conducting open-source intelligence and technical research, discovering previously unknown assets, validating ownership and exposure, and analysing vulnerability intelligence, configuration weaknesses and emerging threats. You will use a range of commercial and open-source tools to collect, enrich and correlate data, while applying sound judgement to distinguish genuine findings from false positives. You will produce clear reports, dashboards and briefings for both technical and non-technical audiences, explaining the potential impact of findings and recommending proportionate remedial action. You will also contribute to improving research methods, automation, data quality and operational processes.
Applicants should have experience in cyber security, threat intelligence, attack surface management, vulnerability management, digital investigations or a closely related discipline. You will need a strong understanding of networking, DNS, web technologies, cloud environments and common security weaknesses, together with the ability to investigate unfamiliar technologies independently. Familiarity with tools and techniques such as passive DNS, certificate transparency, search engines, APIs, scripting and data analysis would be advantageous. Excellent written and verbal communication skills are essential, as is the ability to manage competing priorities, document work accurately and collaborate effectively with security, infrastructure, engineering and risk stakeholders. Relevant professional certifications or demonstrable practical experience are welcome, but curiosity, analytical thinking and a commitment to continuous learning are equally important.
Attack Surface Research Analyst
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer