Software Engineer - Vulnerability Management
Starling Bank2 months ago
Manchester, United Kingdom +2 moreSenior
Responsibilities
- Design, build, and maintain vulnerability management tooling and technical solutions.
- Automate processes to reduce manual effort and improve operational efficiency.
- Collaborate with engineering teams and remediators to prioritize vulnerability remediation.
- Analyze vulnerability data to produce actionable insights, reports, and metrics.
- Develop integrations between internal and external platforms to improve remediation lifecycle data capture.
- Apply security standards, regulatory requirements, and industry frameworks.
- Monitor emerging vulnerability management trends and regulatory changes.
- Develop technical playbooks and runbooks for vulnerability triage, remediation, and incident response.
- Identify recurring vulnerability hotspots and drive strategic risk reduction.
- Support security of containerized environments, cloud configurations, and Kubernetes manifests.
Requirements
- Experience with AWS or GCP cloud environments.
- Experience with Kubernetes and containers.
- Experience with infrastructure as code using Terraform.
- Proficiency in Go or Java.
- Strong software engineering and automation experience with an interest in vulnerability management.
- Experience developing integrations through APIs.
- Knowledge of container and orchestration security, including image scanning, runtime protection, and Kubernetes manifest hardening.
- Familiarity with cloud posture management, configuration drift monitoring, security benchmarks, and AWS/GCP best practices.
- Ability to use CVSS scores and exploitability data in risk-based prioritization models.
- Experience in one or more vulnerability management areas such as endpoint scanning, vulnerability intelligence, AppSec vulnerability management, cloud-native workload vulnerability management, or external attack surface management is desirable but not essential.
- Experience managing Software Bill of Materials data, including ingestion and correlation of standard formats.
- Ability to learn new technologies, understand broader context, manage details, and communicate effectively with stakeholders.
Benefits
- Hybrid working with an expectation of at least one office day per week for Technology employees.
- 25 days of holiday plus public holiday allowance, with additional birthday leave and the option to buy or sell up to five extra days.
- Annual leave increases with length of service.
- 16 hours of paid volunteering time per year.
- Salary sacrifice and an enhanced company pension scheme.
- Life insurance at four times salary and group income protection.
- Private medical insurance with VitalityHealth, including mental health support and cancer care.
- Generous family-friendly policies.
- Perkbox membership with retail discounts, wellness services, and other perks.
- Cycle to Work, gym partnership, and electric vehicle leasing initiatives.
Categories