Information Security Analyst - Vulnerability Management

Salary: £65,000 - 105,000 per year

Requirements:

• We need demonstrated vulnerability management experience in a role such as vulnerability analyst, specialist, or engineer.
• We need strong technical knowledge of cloud platforms (AWS, GCP) and cloud-native security architecture.
• We need experience with Kubernetes and container security principles.
• We need security knowledge in AWS/GCP.
• We need basic scripting skills for automation purposes (Python, Go, Bash, etc.).
• We need proven ability to develop integrations by interacting with APIs.
• We need excellent analytical and problem-solving skills to identify vulnerabilities and assess potential impact.
• We need strong written and verbal communication skills to foster collaboration across cross-functional teams and stakeholders.
• We need adaptability to learn new technologies and evolve alongside the security landscape.
• Desirable: knowledge of CI/CD pipeline management including TeamCity and Jenkins.
• Desirable: knowledge of external attack surface management.
• Desirable: proficiency in infrastructure as code, specifically Terraform.
• Desirable: competence in at least one programming language (e.g. Java, Golang, Python) for automation.

Responsibilities:

• We enable remediation groups and engineers to address and resolve outstanding findings within agreed timeframes.
• We triage and prioritise vulnerabilities using a risk-based approach.
• We ensure that all assets within the scope of vulnerability management are scanned within agreed timeframes.
• We partner with engineering and product teams to bridge the gap between security discovery and resolution, turning complex findings into clear, actionable tasks.
• We coordinate with resolver groups to ensure timely and efficient remediation of identified vulnerabilities.
• We maintain and update a wide range of vulnerability management tools, including Build Phase VM, CWPP, Endpoint VM, and VM Intelligence.
• We review and update vulnerability management documentation to align with internal and external compliance requirements, industry best practices, and emerging threats.
• We build and maintain our vulnerability ecosystem across cloud-native stacks and endpoint security, using automation to reduce manual overhead for the wider team.
• We process vulnerability data to provide reports, insights, and metrics that support our risk-based approach.
• We develop integrations for internal and external tools to capture data relevant to the vulnerability remediation process.
• We ensure compliance with relevant security standards, frameworks, and regulations.
• We stay up to date with the latest trends and developments in vulnerability management, security standards, and regulations.
• We act as a subject matter expert and evolve the teams defensive strategy alongside the wider security organisation.

Technologies:

• AWS
• Bash
• CI/CD
• Cloud
• GCP
• Golang
• Support
• Java
• Jenkins
• Kubernetes
• Python
• Security
• Teamcity
• Terraform

More:

We are Starling, the UKs first and leading digital bank on a mission to fix banking with fast technology, fair service, and honest values. We are a fully licensed UK bank and a tech-first company with over 2,800 people across offices in London, Cardiff, Dublin, Southampton, and Manchester. We offer a hybrid working approach, with Technology colleagues attending the office a minimum of one day per week and a preference for living within commutable distance of one of our offices. We provide a supportive and creative environment with strong mentorship, collaboration across teams, and opportunities to learn and grow. Our benefits include 25 days holiday plus public holidays, an extra day for your birthday, enhanced annual leave options, paid volunteering time, pension, life insurance, private medical insurance, family-friendly policies, Perkbox membership, and access to cycle-to-work, gym, and EV leasing initiatives. We are an equal opportunity employer and welcome people from all backgrounds.

last updated 36 week of 2026