Vulnerability Management Engineer — Automation & Cloud Security

Starling; Cardiff; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Volunteering time

Pension scheme via salary sacrifice

Job summary

Starling Bank in Cardiff, Wales, is seeking a highly motivated Software Engineer to join our Vulnerability Management team. You will design, build, and maintain tooling to automate remediation, and collaborate with engineering teams to reduce risk across our digital banking platform.

You will contribute to cloud security, container hardening, and data-driven security metrics, while participating in cross-functional collaboration and a hybrid work model.

Qualifications

• Experience designing and maintaining vulnerability management tooling.
• Strong cloud experience (AWS, GCP) and container security.
• Proficiency in Kubernetes and infrastructure as code (Terraform).
• Knowledge of Go or Java and software engineering fundamentals.
• Experience building integrations via APIs and automations.
• Ability to learn new technologies and communicate with stakeholders.

Responsibilities

• Design, build, and maintain vulnerability management tooling and solutions.
• Drive automation to reduce manual overhead and streamline remediation.
• Collaborate with internal engineering teams to prioritise remediation activities.
• Transform vulnerability data into actionable reports and metrics.
• Develop integrations across platforms to improve data capture in remediation lifecycle.
• Maintain alignment with security standards, and stay ahead of trends.

Skills

Cloud AWS

Kubernetes

Terraform

Go or Java

Automation

APIs

Tools

Terraform

Job description

Starling Bank in Cardiff, Wales, is seeking a highly motivated Software Engineer to join our Vulnerability Management team. You will design, build, and maintain tooling to automate remediation, and collaborate with engineering teams to reduce risk across our digital banking platform.

You will contribute to cloud security, container hardening, and data-driven security metrics, while participating in cross-functional collaboration and a hybrid work model.