Software Engineer - Vulnerability Management

Starling Bank; City of Westminster; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading digital bank is seeking a dedicated Vulnerability Management Engineer to enhance tooling and automate processes. You'll collaborate with technical teams, manage vulnerabilities, and ensure compliance with security standards. Ideal candidates have strong skills in infrastructure as code, programming, and cloud technologies. Join us to be part of a fast-paced environment that values innovation and collaboration.

Benefits

33 days holiday including public holidays

Extra day off for your birthday

Private Medical Insurance

Generous family-friendly policies

Access to retail discounts through Perkbox

Qualifications

• Demonstrable experience with Infrastructure as Code tools.
• Proficiency in at least one programming language for automation.
• Strong engineering background and automation skills.

Responsibilities

• Develop and maintain vulnerability management tooling and solutions.
• Implement automation to increase efficiency.
• Process vulnerability data for insights and metrics.

Skills

Infrastructure as Code tools (Terraform, CloudFormation)

Programming (Java or Golang)

CI/CD experience

Automation skills

API integration

Cloud infrastructure (AWS)

Strong communication skills

Job description

We are seeking a highly motivated and experienced Vulnerability Management Engineer to join our Cyber Security team. As a Vulnerability Management Engineer, your primary responsibility will be to manage existing vulnerability management-specific tooling, and have an active role in improving existing processes. You will achieve this by creating automated solutions through collaboration with various technical teams.

Responsibilities

• Develop and maintain vulnerability management tooling and solutions
• Implement automation to remove manual processes and increase efficiency
• Work with internal remediators to prioritise vulnerability management activities
• Process vulnerability data to provide reports, insights and metrics, that aid in the risk-based approach to vulnerability management
• Develop integrations for internal and external tools to capture data relevant to the vulnerability remediation process (e.g. by interacting with APIs)
• Ensure compliance with relevant security standards, frameworks, and regulations
• Stay up to date with the latest trends and developments in vulnerability management, security standards, and regulations
• Hybrid working: located within a commutable distance to an office; attend the office a minimum of 1 day per week
• Strong technical knowledge of cloud infrastructure, particularly AWS and containerisation technologies

Qualifications

• Demonstrable experience with Infrastructure as Code (IaC) tools such as Terraform or CloudFormation
• Proficiency in at least one programming language (ideally Java or Golang) for developing automation and integrations
• Strong engineering and automation background
• Strong automation skills with CI/CD experience
• Experience with developing integrations by interacting with APIs
• Ability and willingness to learn new technologies and adapt to evolving security landscapes
• The capability to understand the bigger picture while effectively managing details
• Strong written and verbal communication skills to effectively collaborate with cross-functional teams and stakeholders

Good to have

• Interest in cyber security, specifically Vulnerability Management
• Familiar with TypeScript/Vue.js
• Open source scanning tool such as Trivy or similar

Company & Benefits

Starling is the UK's first and leading digital bank on a mission to fix banking. We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. We are a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company. We employ more than 3,000 people across our London, Southampton, Cardiff and Manchester offices. Our technologists are at the heart of Starling and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be; innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business; we are in this together. The way to thrive and shine within Starling is to be a self-driven individual with ownership of your work: From building things, designing, discovering, to sharing knowledge with colleagues and ensuring processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five Starling values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.

• 33 days holiday (including public holidays, which you can take when it works best for you)
• An extra day’s holiday for your birthday
• Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
• 16 hours paid volunteering time a year
• Salary sacrifice, company enhanced pension scheme
• Life insurance at 4x your salary & group income protection
• Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr Smith and Peloton
• Generous family-friendly policies
• Incentives refer a friend scheme
• Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
• Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing