# Information Security Analyst - Vulnerability Management **Company**: Starling Bank **Location**: Southampton **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Category**: IT **Industry**: Finance **Apply**: https://apply.workable.com/j/CD477D17B9?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_e43d880d-994 ## Description Starling Bank is seeking a highly motivated and experienced Vulnerability Management Analyst to join our team. As a Vulnerability Management Analyst, your primary responsibility will be to enable remediation groups and engineers to address and resolve outstanding findings within agreed timeframes. You will achieve this by effectively triaging and prioritising vulnerabilities using a risk-based approach. Additionally, you will ensure that all assets within the scope of vulnerability management are scanned within agreed time frames. Responsibilities: - Partner with engineering and product teams to bridge the gap between security discovery and resolution, turning complex findings into clear, actionable tasks. - Utilise a risk-based approach to prioritise vulnerabilities based on their potential impact and exploitability. - Coordinate with resolver groups to ensure timely and efficient remediation of identified vulnerabilities. - Maintain and update a wide range of Vulnerability Management tools to ensure their effectiveness and reliability. - Review and update Vulnerability Management related documentation to align with internal and external compliance requirements, industry best practices and emerging threats. - Build and maintain our vulnerability ecosystem, from cloud-native stacks to endpoint security, using automation to reduce manual overhead for the wider team. - Process vulnerability data to provide reports, insights and metrics, that aid in the risk-based approach to vulnerability management. - Develop integrations for internal and external tools to capture data relevant to the vulnerability remediation process. - Ensure compliance with relevant security standards, frameworks, and regulations. - Stay up to date with the latest trends and developments in vulnerability management, security standards, and regulations. Requirements: - Demonstrated vulnerability management experience in a role such as vulnerability analyst, specialist, or engineer. - Strong technical knowledge of cloud platforms and cloud-native security architecture. - Experience with kubernetes and container security principles. - Security knowledge in AWS/GCP. - Basic scripting skill for automation purposes. - Proven ability to develop integrations by interacting with APIs. - Excellent analytical and problem-solving skills to identify vulnerabilities and assess potential impact. - Strong written and verbal communication skills to foster collaboration across cross functional teams and stakeholders. - Adaptability to learn new technologies and evolve alongside the security landscape. Benefits: - 25 days holiday (plus take your public holiday allowance whenever works best for you). - An extra day’s holiday for your birthday. - Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off. - 16 hours paid volunteering time a year. - Salary sacrifice, company enhanced pension scheme. - Life insurance at 4x your salary & group income protection. - Private Medical Insurance with VitalityHealth including mental health support and cancer care. - Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton. - Generous family-friendly policies. - Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks. ## Skills ### Required - vulnerability management - cloud platforms - kubernetes - container security - security knowledge in AWS/GCP - scripting - API integration - analytical skills - communication skills ### Nice to have - CI/CD pipelines management - external attack surface management - infrastructure as code - programming languages --- Source: [Apply at apply.workable.com](https://apply.workable.com/j/CD477D17B9?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)