External Attack Surface Management Analyst at BAE Systems

Preston, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

20 Jul, 26

Salary

45000.0

Posted On

21 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cyber security, Network security, Operating systems, DNS, Cloud infrastructure, Identity services, Vulnerability management, Web applications, APIs, SaaS platforms, Shadow IT, Data analysis, Risk assessment, Threat intelligence, Incident response, Active defence

Industry

Defense and Space Manufacturing

Description

Job Title: External Attack Surface Management Analyst Job Location: Preston or Frimley - Hybrid- 2 days a month onsite. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role Salary: Circa £45,000 depending on skills and experience Who we are: Join BAE Systems and you’ll be part of something bigger. As a valued member of our global colleague network, you’ll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You’ll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow - shaping a safer future, for all of us. Role Description: Cyber Operations are responsible for protecting BAE Systems from Cyber Attack by various threat actors. You will help support and maintain the Global Attack Surface Management service, to ensure BAE Systems perimeter assets are known and tested, and Shadow-IT assets are discovered and brought into governance. Core Duties: Monitor and maintain visibility of the organisation’s external attack surface, identifying unknown, unmanaged, or misconfigured internet‑facing assets before they can be exploited Triage, analyse, and validate external security exposures and vulnerabilities, helping prioritise risk based on exploitability and potential business impact Work closely with Threat Intelligence, Vulnerability Management, and Cyber Operations teams to coordinate remediation across networks, applications, cloud, and SaaS environments Support Continuous Threat Exposure Management (CTEM) initiatives, contributing to real‑time tracking and reduction of external security risk Produce and support reporting on external threats, vulnerabilities, and exposure trends, providing actionable insights to improve overall security posture Essential Skills: Good technical background in cyber security, with in‑depth knowledge of computer networks, operating systems, and how internet‑facing systems are exposed, discovered, and targeted Broad experience with technologies that form the external attack surface (e.g. DNS, web and cloud infrastructure, identity services, networking, and vulnerability management), and an understanding of how they contribute to external exposure and risk Clear understanding of external risk drivers, such as publicly accessible services, web applications, APIs, SaaS platforms, cloud misconfigurations, Shadow IT, and legacy or forgotten assets Strong analytical capability, comfortable working with large and complex datasets from EASM and scanning tools to identify patterns, prioritise risk, and support data‑driven decision making Ability to articulate external security risk clearly, translating technical findings into meaningful insights, conclusions, and recommendations for operational and stakeholder audiences The Cyber Operations team: Cyber Operations is responsible for protecting BAE Systems from Cyber Attack by various threat actors. Not only do we protect BAE systems and its employees, indirectly we protect those who protect us – who serve in our military and rely on the products and services we create across Threat Intelligence, Detection, Incident Response and now Active Defence we work to evolve cyber operations as a world class capability. Why BAE Systems? Here you’ll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work - this is a place where you can grow your career with confidence and be empowered to be your best. You’ll be recognised for your contribution and enjoy rewards tailored to what’s most important to you and your family - support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make. A place where everyone can thrive: We’re committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 5th May 2026 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-SH1 #LI-Hybrid

Responsibilities

The analyst will monitor and maintain visibility of the organization's external attack surface to identify and remediate unknown or misconfigured internet-facing assets. They will also collaborate with threat intelligence and vulnerability management teams to prioritize risks and support continuous threat exposure management initiatives.