Description
Starling is the UK’s first and leading digital bank on a mission to fix banking!
Our vision is fast technology, fair service, and honest values.
You will participate in end-to-end red and purple team operations, designing and delivering cyber resilience exercises, emulating real-world threat actors, and leveraging MITRE ATT&CK to test the organisation's defences.
Responsibilities include:
- Participating in end-to-end red and purple team operations
- Designing and delivering cyber resilience exercises
- Emulating real-world threat actors
- Utilising dedicated research time to identify emerging threats
- Working alongside defensive teams post-engagement
- Engaging in continuous learning and professional development
Requirements:
- 2+ years of experience in Offensive Security (Red Teaming, Pentesting) OR highly technical other cyber security domains
- Experience emulating real-world cyber threats
- Relevant industry certifications (e.g., CRTO, OSEP, OSMR, OSCP)
- Familiarity with standard C2 frameworks and common offensive security tooling
- Strong network and operating system fundamentals
Ideal candidate would also bring:
- Experience chaining offensive operations directly into broader organisational resilience or response exercises
- Exposure to financial sector threat-led penetration testing frameworks
- Deep understanding of macOS operating system fundamentals
- Experience in payload modification, scripting, or software engineering
Benefits:
- 33 days holiday
- An extra day’s holiday for your birthday
- Annual leave is increased with length of service
- 16 hours paid volunteering time a year
- Salary sacrifice, company enhanced pension scheme
- Life insurance at 4x your salary & group income protection
- Private Medical Insurance with VitalityHealth