Information Security Engineer - Vulnerability Management

• Manage vulnerability management tooling and play an active role in improving existing processes within the Cyber Security team. • Create automated solutions through collaboration with technical teams across Starling. • Treat security as a continuous engineering challenge to outpace the threat landscape.

• Have a strong engineering and automation background with a keen interest in Vulnerability Management. • Have cloud experience across AWS and GCP. • Have Kubernetes and container experience. • Be proficient with infrastructure as code, specifically Terraform. • Be proficient in at least one programming language, ideally Java, Golang, Python, or SQL. • Have strong automation skills. • Have proven experience deploying enterprise-scale, cloud-native Vulnerability Management platforms across complex cloud estates. • Have experience developing integrations by interacting with APIs. • Show ability and willingness to learn new technologies and adapt to evolving security landscapes. • Be capable of understanding the bigger picture while effectively managing details. • Have strong written and verbal communication skills to collaborate with cross-functional teams and stakeholders. • Have a deep understanding of container and orchestration security, including image scanning, runtime protection, and hardening Kubernetes manifests. • Be familiar with cloud posture management tools and frameworks to monitor configuration drift and ensure adherence to security benchmarks such as CIS Benchmarks. • Demonstrate proven ability to translate raw vulnerability data including CVSS scores and exploitability into business-contextualised risk insights.

• Have practical experience in endpoint vulnerability scanning. • Bring experience in vulnerability intelligence. • Have experience in AppSec vulnerability management. • Have experience in vulnerability management of cloud-native workloads. • Bring experience in external attack surface management. • Have experience with Software Bill of Materials (SBOM) management, specifically ingesting and correlating standard formats.

• Design, build, and maintain robust vulnerability management tooling and technical solutions. • Drive efficiency by implementing automated solutions that eliminate manual overhead and streamline operations. • Partner with internal engineering teams and remediators to intelligently prioritise remediation activities. • Synthesise raw vulnerability data into actionable insights, reports, and metrics to support a risk-based security posture. • Engineer custom integrations between internal and external platforms to enhance data capture throughout the remediation lifecycle. • Maintain strict adherence to global security standards, regulatory requirements, and industry frameworks. • Monitor emerging trends in vulnerability management and shifting regulatory landscapes. • Proactively identify vulnerabilities and architect technical solutions to fortify the global ecosystem. • Develop and maintain comprehensive technical playbooks and runbooks to standardise vulnerability triage, remediation, and incident response procedures. • Utilise pattern and trend analysis to identify Vulnerability Hotspots to drive strategic risk reduction rather than just individual remediation.

• Get 25 days holiday plus flexible public holidays, with an extra day off for your birthday. • Earn additional annual leave with length of service, and choose to buy or sell up to five extra days. • Receive 16 hours paid volunteering time a year. • Access Private Medical Insurance with VitalityHealth including mental health support and cancer care. • Receive life insurance at 4x salary and group income protection. • Benefit from generous family-friendly policies. • Access Cycle to Work, Salary Sacrificed Gym partnerships, and Electric Vehicle leasing. • Enjoy a salary sacrifice, company enhanced pension scheme. • Attend the office a minimum of 1 day per week with hybrid flexibility.

Starling is the UK's first and leading digital bank on a mission to fix banking. Built as a new kind of bank because technology has the power to help people save, spend, and manage their money in a transformative way. Starling is a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company, employing over 2,800 people across London, Southampton, Cardiff, Dublin, and Manchester offices.