At <a href="https://enginebystarling.com/" target="_blank">Engine by Starling</a>, we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starlings software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and two years ago we split out as a separate business. <a href="https://www.starlingbank.com/" target="_blank">Starling Bank</a> has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. This SaaS technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starlings success.As a company, everyone is expected to roll up their sleeves to help deliver great outcomes for our clients. We are an engineering led company and we’re looking for someone who will be excited by the potential for Engine’s technology to transform banking in different markets around the world.Hybrid WorkingWe have a Hybrid approach to working here at Engine - our preference is that youre located within a commutable distance of one of our offices so that were able to interact and collaborate in person. About the RoleWere seeking a passionate and experienced Vulnerability Lead to shape and lead the creation and ongoing operation of our comprehensive vulnerability management program. This is a unique opportunity to establish a critical security function, define best practices, and significantly enhance our overall security posture.A key aspect of this role involves the end-to-end management and continuous improvement of the vulnerability management programme. This includes defining scanning strategies, conducting risk-based triage and prioritisation, overseeing remediation efforts, and providing actionable reporting to enhance the Engines security posture.What youll get to do:<ul> <li>Conduct vulnerability scans regularly and proactively as needed.</li> <li>Validate findings and use a risk-based approach.</li> <li>Enrich findings with threat intelligence and business impact to determine exploitability.</li> <li>Be an enabler for resolver groups by triaging and prioritising vulnerabilities to facilitate timely resolution of outstanding findings using a risk based approach</li> <li>Track and manage remediation through to closure with Technology and Security teams.</li> <li>Ensure timely patching of critical vulnerabilities in line with SLAs.</li> <li>Ensure visibility across the technology estate, including cloud environments.</li> <li>Coordinate scanning and coverage of data centre estate, cloud infrastructure, containers, mobile SDKs, and web apps.</li> <li>Process vulnerability data to provide reports, insights and metrics, that aid in the risk-based approach to vulnerability management.</li> <li>Identify and flag blind spots or gaps in scan coverage or asset inventory.</li> <li>Keep up with zero-day disclosures and emerging threats.</li> <li>Maintain and share dashboards and reports on vulnerability trends, KPIs, and SLA compliance.</li> <li>Review and update Vulnerability Management related documentation to align with internal and external compliance requirements, industry best practices and emerging threats  (e.g. ISO 27001, PCI DSS/3DS, SOC 2 and NIST)</li> <li>Help define scanning schedules, thresholds, and automation opportunities.</li> <li>Collaborate with DevSecOps/Product Teams to embed security scanning into CI/CD pipelines.</li> <li>Assist in evaluating new tooling and processes for better automation and risk tracking.</li> </ul>Essential<ul> <li>Strong engineering and automation background with an interest in vulnerability management</li> <li>Strong automation skills with CI/CD experience</li> <li>Strong technical knowledge, including:</li> <ul> <li>Cloud Experience (AWS, GCP)</li> <li>Kubernetes and Container experience</li> <li>Infrastructure as code (Terraform)</li> <li>Dashboard creation, front-end experience</li> </ul> <li>Self-sufficient - can be a trusted escalation point across teams</li> <li>Can drive improvements to visibility and remediation workflows</li> <li>5+ years experience in vulnerability management, security operations, infrastructure security or security engineering</li> <li>Familiarity with end-to-end vulnerability management lifecycle including associated tools and platforms</li> <li>Ability to work effectively with patching teams and co-ordinate remediation activities</li> <li>Understanding of CVSS scoring, OWASP Top 10 and MITRE ATT&amp;CK</li> <li>Organised and able to track and report on remediation activities across multiple teams</li> <li>Can translate scan data into clear, risk-based reports for management teams</li> <li>Partner with the information security risk management team on assurance activities</li> </ul>Desired<ul> <li>Practical experience in one or more of the Vulnerability Management fields:</li> <ul><li>Vulnerability Intelligence, AppSec Vulnerability Management, Vulnerability Management of cloud native workloads </li></ul> <li>Open source scanning tool such as Trivy or similar</li> </ul>Interview processInterviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team:<ul> <li>Stage 1 - 45 mins with BISO</li> <li>Stage 2 - 60 min with Peers</li> <li>Stage 3 - Final with CTO/Deputy CTO</li> </ul>