Vulnerability Management Engineer - Cloud & Automation

Starling; Greater London; Hybrid; GBP 85,000 - 110,000; Full time

Benefits offered by this job

25 days holiday

Birthday leave

Hybrid work model

Private Medical Insurance

Cycle to Work

Salary Sacrificed Pension

Wellbeing support

Volunteering time

Job summary

Starling is seeking a highly motivated Vulnerability Management Engineer to join our Cyber Security team. You will design and maintain tooling, automate processes, and collaborate with engineering to prioritise remediation based on risk.

You will synthesize vulnerability data into actionable insights, develop integrations via APIs, and ensure compliance with global security standards while staying ahead of evolving threats.

Qualifications

• Extensive cloud experience (AWS or GCP) in production environments.
• Kubernetes and container security expertise.
• Infrastructure as code using Terraform.
• Proficiency in Go or Java programming languages.
• Strong engineering mindset with automation focus in vulnerability management.
• Experience developing integrations via APIs.
• Ability to learn new technologies and adapt to evolving security landscapes.

Responsibilities

• Design, build, and maintain vulnerability management tooling and solutions.
• Automate processes to reduce manual overhead and improve efficiency.
• Prioritise remediation with internal engineering teams based on risk.
• Turn raw vulnerability data into actionable risk insights and metrics.
• Create integrations between internal and external platforms for data capture.
• Maintain compliance with global security standards and regulatory requirements.
• Develop playbooks to standardise vulnerability triage, remediation, and incident response.

Skills

AWS

GCP

Kubernetes

Terraform

Go

Java

APIs

SBOM management

Tools

SBOM management

Job description

Starling is seeking a highly motivated Vulnerability Management Engineer to join our Cyber Security team. You will design and maintain tooling, automate processes, and collaborate with engineering to prioritise remediation based on risk.

You will synthesize vulnerability data into actionable insights, develop integrations via APIs, and ensure compliance with global security standards while staying ahead of evolving threats.