Software Engineer - Vulnerability Management

Salary: £65,000 - 105,000 per year

Requirements:

• Strong technical knowledge, including cloud experience (AWS, GCP), Kubernetes and container experience, infrastructure as code (Terraform), and proficiency with either Go or Java.
• Strong engineering and automation background with a keen interest in vulnerability management.
• Experience developing integrations by interacting with APIs.
• Ability and willingness to learn new technologies and adapt to evolving security landscapes.
• Capability to understand the bigger picture while effectively managing details.
• Strong written and verbal communication skills to collaborate effectively with cross-functional teams and stakeholders.
• Deep understanding of container and orchestration security, including image scanning, runtime protection, and hardening Kubernetes manifests.
• Proficiency in cloud posture management, including monitoring cloud configuration drift and ensuring adherence to security benchmarks and best practices.
• Proven ability to translate raw vulnerability data into business-contextualised risk insights to support remediation prioritisation.
• Practical experience in one or more vulnerability management fields is desirable, including endpoint vulnerability scanning, vulnerability intelligence, AppSec vulnerability management, vulnerability management of cloud-native workloads, or external attack surface management.
• Experience with Software Bill of Materials (SBOM) management, specifically ingesting and correlating standard formats.

Responsibilities:

• Manage vulnerability management tooling and improve existing processes.
• Create automated solutions through collaboration with technical teams across Starling.
• Design, build, and maintain robust vulnerability management tooling and technical solutions.
• Drive efficiency by implementing automation that eliminates manual overhead and streamlines operations.
• Partner with internal engineering teams and remediators to prioritise remediation activities.
• Synthesise raw vulnerability data into actionable insights, reports, and metrics to support a risk-based security posture.
• Engineer custom integrations between internal and external platforms to enhance data capture throughout the remediation lifecycle.
• Maintain adherence to global security standards, regulatory requirements, and industry frameworks.
• Monitor emerging trends in vulnerability management and shifting regulatory landscapes.
• Develop and maintain technical playbooks and runbooks to standardise vulnerability triage, remediation, and incident response procedures.
• Use pattern and trend analysis to identify vulnerability hotspots and drive strategic risk reduction.

Technologies:

• AWS
• Cloud
• GCP
• Support
• Java
• Kubernetes
• Security
• Terraform
• DevOps

More:

We are Starling, the UKs first and leading digital bank, on a mission to fix banking with fast technology, fair service, and honest values. Since our journey began in 2014, we have grown to over 2,800 people across five offices in London, Cardiff, Dublin, Southampton, and Manchester, and we now serve more than 3.5 million accounts and 350,000 business customers. We are a fully licensed UK bank, but at our heart we are a tech-first company building brilliant products on a collaborative, open, and flat structure. We work in a hybrid model, with technology teams attending the office at least one day per week and ideally based within commutable distance of one of our offices. We offer 25 days holiday plus public holidays, an extra day for your birthday, enhanced pension, life insurance, private medical insurance, paid volunteering time, family-friendly policies, Perkbox membership, and access to cycle-to-work, gym, and EV leasing initiatives. We value inclusion, diversity, and curiosity, and we encourage people to apply even if they do not meet every requirement.

last updated 35 week of 2026