Hybrid Vulnerability Management Analyst - Cloud Security

Starling; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Private Medical Insurance

Job summary

Starling is seeking a highly capable Vulnerability Management Analyst to join our security team in a hybrid role. You will enable remediation groups and engineers to address findings within agreed timeframes, triaging vulnerabilities with a risk-based approach, and ensuring asset scanning within defined windows.

Key focus areas include coordinating with resolver groups, maintaining vulnerability tooling, and building integrations to capture remediation data.

Qualifications

• Demonstrated vulnerability management experience in roles such as vulnerability analyst, specialist, or engineer.
• Strong technical knowledge of cloud platforms (AWS, GCP) and cloud-native security architecture.
• Experience with Kubernetes and container security principles.
• Security knowledge in AWS/GCP.
• Basic scripting for automation (Python, Go, Bash).
• Proven ability to develop integrations by interacting with APIs.
• Excellent analytical and problem-solving skills for identifying vulnerabilities and impact.
• Strong written and verbal communication skills for cross-functional collaboration.
• Adaptability to learn new technologies and evolving security landscape.

Responsibilities

• Develop and maintain vulnerability management tooling for cloud-native and on-prem environments.
• Lead towards automated remediation by implementing integrations reducing manual toil.
• Work with internal remediators to prioritise vulnerability activities.
• Process vulnerability data to provide risk-based reports and insights.
• Develop integrations with internal/external tools to capture remediation data.
• Ensure compliance with security standards and regulations.
• Stay updated on vulnerability management trends and threats.

Skills

Vulnerability management

Cloud platforms (AWS, GCP)

Kubernetes & container security

Automation scripting (Python, Go, Bash

APIs integration

Analytical thinking

Communication

Adaptability

Tools

Build Phase VM

CWPP

Endpoint VM

VM Intelligence

Terraform

TeamCity

Jenkins

Job description

Starling is seeking a highly capable Vulnerability Management Analyst to join our security team in a hybrid role. You will enable remediation groups and engineers to address findings within agreed timeframes, triaging vulnerabilities with a risk-based approach, and ensuring asset scanning within defined windows.

Key focus areas include coordinating with resolver groups, maintaining vulnerability tooling, and building integrations to capture remediation data.