Senior Platform Engineer

Your responsibilities

• Use Assetnote or similar attack surface management technologies to discover, monitor and analyse internet-facing assets and exposures.
• Investigate security findings to determine their validity, exploitability, exposure and potential security impact.
• Apply security judgement and contextual analysis to distinguish meaningful risks from false positives, expected behaviour or low-value findings.
• Analyse externally observable risks across domains, applications, services, network infrastructure and cloud-hosted assets.
• Assess findings using available technical, asset and business context to support effective risk prioritisation.
• Maintain and improve the accuracy of asset visibility, ownership information and external attack-surface data.
• Provide clear security analysis and recommended actions to relevant technology and asset owners, and support findings through to appropriate closure where required.
• Identify recurring exposure patterns, control gaps and changes in the external threat surface and provide insights to improve perimeter security posture.
• Contribute to improvements in security monitoring, reporting, platform configuration and analytical workflows.
• Your skills and experience
• We are interested in hearing from candidates with strong cybersecurity analysis experience and a solid understanding of external attack surfaces. The role places particular emphasis on security analysis and threat assessment, supported by platform engineering and automation capabilities.
• Essential – Security and attack-surface experience
• Security analysis: Demonstrated experience investigating security exposures, vulnerabilities or externally observable risks and forming defensible security conclusions from technical evidence.
• Attack surface management: Hands-on experience with external attack surface management, exposure management, vulnerability management or comparable security capabilities.
• Security tooling: Experience using Assetnote or similar vulnerability or exposure-management platforms.
• External exposure analysis: Strong understanding of internet-facing assets, services, ports, protocols, domains, subdomains, certificates and externally exposed applications.