Description
The London Metal Exchange (LME) is building an AI-powered vulnerability triage platform to transform how they identify, prioritise, and track remediation of security vulnerabilities across their estate. They are looking for a Software Developer who can design and build this platform from the ground up.
The system will ingest vulnerability feeds from security tooling (Relia Quest, MDE, SonarQube, Qualys, FireMon, Vendor notification), apply AI-driven contextualisation and risk-based prioritisation, and surface actionable triage decisions to security operations and patching teams - replacing manual, volume-based processes with an intelligent, data-driven workflow.
This is a greenfield build with real impact: the platform will directly support LME's ability to meet critical patch SLAs, and demonstrate a quantitative security posture to the Board and regulators.
Responsibilities
- Design and build the AI-powered vulnerability triage platform
- Integrate with LLM / AI APIs (OpenAI, Anthropic, Azure OpenAI or similar)
- Experience building REST APIs with authentication and RBAC
- Solid understanding of async programming, message queues, and data pipeline patterns
- Comfortable working from loosely defined requirements, able to propose architecture and drive to delivery
- Experience with containerisation and CI/CD pipelines
- Strong written communication; able to produce technical documentation
Requirements
- 3+ years of professional software development experience with e.g. Java, Node.js, and Python in production environments
- Strong PostgreSQL skills: schema design, query optimisation, indexing strategy, migrations
- Demonstrable experience integrating with LLM / AI APIs
- Experience building REST APIs with authentication and RBAC
- Solid understanding of async programming, message queues, and data pipeline patterns
- Comfortable working from loosely defined requirements, able to propose architecture and drive to delivery
- Experience with containerisation and CI/CD pipelines
- Strong written communication; able to produce technical documentation
Nice to Have
- Experience in cybersecurity tooling, vulnerability management, or security operations platforms
- Familiarity with CVSS, EPSS, or vulnerability risk scoring frameworks
- Experience with OpenShift or Kubernetes in an enterprise environment
- Background in regulated financial services, FMI, exchange, or similar environment
- Prompt engineering experience: structured outputs, chain-of-thought, RAG patterns