Software Engineer – Vulnerability Management

Overview

As Vulnerability Management Engineer you will design and maintain vulnerability tooling to strengthen Starling’s security posture. You will partner with cross-functional teams to automate processes, prioritise remediation, and turn raw vulnerability data into actionable insights. You’ll develop integrations and playbooks that standardise triage and response across the security team. This is a hands-on role at a fast-growing fintech, with opportunities to influence how we govern risk at scale. You will work in a collaborative, innovative culture that values clear ownership and continuous improvement.

Pay / Benefits

• 25 days holiday
• Birthday day off
• Pension scheme
• Life insurance 4x salary
• Private Medical Insurance with VitalityHealth
• Perkbox discounts and wellness platform

Responsibilities

• Design, build, and maintain vulnerability management tooling and solutions
• Automate processes to reduce manual overhead and improve efficiency
• Collaborate with engineering teams to prioritise remediation activities
• Transform vulnerability data into actionable reports and metrics for risk management
• Engineer integrations between internal and external platforms for remediation lifecycle
• Ensure adherence to global security standards, regulatory requirements, and industry frameworks
• Stay ahead of trends in vulnerability management and regulatory changes
• Develop and maintain technical playbooks and runbooks for standardised security operations
• Identify vulnerability hotspots and drive strategic risk reduction

Key requirements

• Strong engineering and automation background
• Cloud experience (AWS, GCP)
• Kubernetes and container experience
• Infrastructure as code (Terraform)
• Proficiency in at least one programming language (Java, Golang, Python, SQL)
• Strong automation skills
• Experience developing API integrations
• Willingness to learn new technologies and adapt to evolving security landscapes
• Ability to balance big-picture thinking with attention to detail
• Strong written and verbal communication for cross-functional collaboration

• Cross-functional collaboration
• Proactive communication
• Curiosity and learning mindset
• AWS and/or GCP cloud experience
• Kubernetes and container security
• Terraform or similar IaC

…