Vulnerability Management Engineer – Cloud & Automation Lead

Starling; Southampton; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Pension scheme

Private Medical Insurance

Cycle to Work

Volunteering time

Retail discounts

Wellness platform

Job summary

Starling is seeking a Vulnerability Management Analyst to enable remediation, triage findings with a risk-based approach, and assure asset scanning within agreed timeframes. The role collaborates with engineering and product teams to translate findings into actionable tasks and maintains VM tooling across cloud-native and on-prem environments.

You will bridge security discovery and resolution, prioritise based on impact, and help drive automation to reduce manual overhead while staying compliant

Qualifications

• Demonstrated vulnerability management experience in a security role.
• Strong knowledge of cloud platforms (AWS, GCP) and cloud-native security architecture.
• Experience with Kubernetes and container security principles.
• Security knowledge in AWS/GCP.
• Basic scripting for automation (Python, Go, Bash).
• Proven ability to develop integrations by interacting with APIs.
• Excellent analytical and problem-solving skills to identify vulnerabilities and assess impact.
• Strong written and verbal communication to collaborate across teams.
• Adaptability to learn new technologies and evolving threats.

Responsibilities

• Develop and maintain vulnerability management tooling across cloud-native and on-prem environments.
• Lead automated remediation by building integrations that reduce manual toil.
• Prioritise vulnerability activities with internal remediators.
• Process vulnerability data to generate reports and metrics for risk-based decisions.
• Ensure compliance with security standards and regulations.
• Stay up to date with vulnerability management trends and threats.

Skills

Vulnerability management

Cloud platforms (AWS, GCP)

Kubernetes

Container security

APIs integration

Automation scripting (Python, Go, Bash

Analytical skills

Communication

Adaptability

Tools

Build Phase VM

CWPP

Endpoint VM

VM Intelligence

Job description

Starling is seeking a Vulnerability Management Analyst to enable remediation, triage findings with a risk-based approach, and assure asset scanning within agreed timeframes. The role collaborates with engineering and product teams to translate findings into actionable tasks and maintains VM tooling across cloud-native and on-prem environments.

You will bridge security discovery and resolution, prioritise based on impact, and help drive automation to reduce manual overhead while staying compliant