Vulnerability Lead - Engine by Starling | London, UK

At Engine by Starling, we are on a mission to find and work with leading banks around the world to build rapid growth businesses using our technology.

Engine is Starling\’s SaaS business, built to power Starling Bank. It became a separate business two years ago and now offers its innovative digital features and back-office processes to banks globally, contributing to Starling\’s success.

As a company, everyone is expected to contribute to delivering great outcomes for our clients. We are engineering-led and excited about how Engine\’s technology can transform banking markets worldwide.

Hybrid Working

We prefer team members to be within commuting distance of our offices for collaboration.

About the Role

We seek a passionate Vulnerability Lead to develop and manage our vulnerability management program, enhancing our security posture through best practices and continuous improvement.

Key Responsibilities:

• Conduct and validate vulnerability scans, prioritizing risks and overseeing remediation.
• Manage remediation tracking, ensure timely patching, and maintain visibility across cloud and on-premise environments.
• Provide reports and insights, identify gaps, and stay updated on emerging threats.
• Align documentation with compliance standards like ISO 27001, PCI DSS, SOC 2, and NIST.
• Collaborate with DevSecOps and Product Teams to embed security into CI/CD pipelines.

Requirements

Essential:

• 5+ years in vulnerability management, security operations, or infrastructure security.
• Experience with vulnerability lifecycle tools, cloud environments, and risk-based reporting.
• Strong coordination skills and understanding of CVSS, OWASP Top 10, MITRE ATT&CK.

Desired:

• Knowledge of CI/CD security tooling and threat intelligence application.

Interview Process:

Our process is conversational, including stages with BISO, peers, and CTO/Deputy CTO, allowing mutual understanding.

Benefits:

• 33 days holiday, birthday leave, and options to buy/sell days.
• Paid volunteering, pension, life insurance, private medical, and partner discounts.
• Family policies, referral schemes, Perkbox, and sustainable initiatives.

About Us:

We value diversity and inclusion, welcoming applicants from all backgrounds. Applying is voluntary, and we process data according to our Privacy Notice.

#J-18808-Ljbffr