Vulnerability Management Analyst: Cloud Security & Automation

Starling Bank Limited; Greater London; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Holiday entitlement

Private medical insurance

Cycle to Work

Pension plan

Job summary

Starling Bank Limited in London is seeking a motivated Vulnerability Management Analyst to drive remediation across cloud-native and on-prem environments. You will triage findings, prioritise risks and coordinate with resolver groups to ensure timely fixes.

Join a hybrid work culture with at least one day in the office per week. The role offers mentorship, collaboration with security and engineering teams, and exposure to ISO27000, PCI-DSS, and NIST standards.

Qualifications

• Demonstrated vulnerability management experience in a security role.
• Strong knowledge of cloud platforms (AWS/GCP) and cloud-native security.
• Experience with Kubernetes and container security principles.
• Scripting basics for automation (Python, Go, Bash).
• Ability to develop integrations via APIs.
• Excellent written and verbal communication, cross-functional collaboration.

Responsibilities

• Develop and maintain vulnerability management tooling across cloud-native and on-prem environments.
• Lead automated remediation by implementing integrations to reduce manual toil.
• Work with internal remediators to prioritise activities.
• Provide reports and metrics for risk-based vulnerability management.
• Stay up to date with trends in vulnerability management and security standards.

Skills

Vulnerability mgmt

Cloud platforms

Kubernetes

Container security

AWS security

GCP security

Python

API integrations

Communication

Tools

Terraform

TeamCity

Jenkins

Job description

Starling Bank Limited in London is seeking a motivated Vulnerability Management Analyst to drive remediation across cloud-native and on-prem environments. You will triage findings, prioritise risks and coordinate with resolver groups to ensure timely fixes.

Join a hybrid work culture with at least one day in the office per week. The role offers mentorship, collaboration with security and engineering teams, and exposure to ISO27000, PCI-DSS, and NIST standards.