Information Security Engineer - Vulnerability Management

Starling Bank is seeking a highly motivated and experienced Vulnerability Management Engineer to join its Cyber Security team. The successful candidate will be responsible for managing vulnerability management tooling and improving existing processes.

Responsibilities:

• Design, build, and maintain robust vulnerability management tooling and technical solutions.
• Drive efficiency by implementing automated solutions that eliminate manual overhead and streamline operations.
• Partner with internal engineering teams and remediators to intelligently prioritise remediation activities.
• Synthesise raw vulnerability data into actionable insights, reports, and metrics to support a risk-based security posture.
• Engineer custom integrations between internal and external platforms to enhance data capture throughout the remediation lifecycle.
• Maintain strict adherence to global security standards, regulatory requirements, and industry frameworks.
• Keep at the forefront of the industry by monitoring emerging trends in vulnerability management and shifting regulatory landscapes.
• Treat security as a continuous engineering challenge to outpace the threat landscape, proactively identifying vulnerabilities and architecting technical solutions to fortify the global ecosystem.
• Develop and maintain comprehensive technical playbooks and runbooks to standardise vulnerability triage, remediation, and incident response procedures.
• Utilise pattern and trend analysis to identify 'Vulnerability Hotspots' to drive strategic risk reduction.

Requirements:

• Strong engineering and automation background with a keen interest in Vulnerability Management.
• Strong technical knowledge, including Cloud Experience (AWS, GCP), Kubernetes and Container experience, Infrastructure as code (terraform), and proficiency with at least one programming language (Java, Golang, Python, SQL).
• Strong automation skills.
• Experience with developing integrations by interacting with APIs.
• Ability and willingness to learn new technologies and adapt to evolving security landscapes.
• Capability to understand the bigger picture while effectively managing details.
• Strong written and verbal communication skills.

Additional Technical Requirements:

• Deep understanding of container & orchestration security.
• Proficiency in cloud posture management.
• Risk-Based prioritisation models.

Benefits:

• 25 days holiday (plus take your public holiday allowance).
• An extra day's holiday for your birthday.
• Annual leave is increased with length of service.
• 16 hours paid volunteering time a year.
• Salary sacrifice, company enhanced pension scheme.
• Life insurance at 4x your salary & group income protection.
• Private Medical Insurance with VitalityHealth.
• Perkbox membership.