Information Security Analyst - SecOps Detection

• Join the growing Security Operations team as a Detection Engineer and Threat Hunter. • Proactively defend Starling’s customers, assets, and systems against emerging threats. • Report to the Information Security Lead for Detection. • Develop, tune, and maintain detection rules that catch attacks early. • Conduct intelligence-driven threat hunts across cloud, SaaS, and endpoint environments. • Take part in collaborative defence improvement activities like Purple Teaming to find and mitigate risks before they reach the bank. • Work in a flat structure that empowers you to make decisions regardless of your primary responsibilities. • Work hybrid from London, attending the office a minimum of one day per week.

• Bring 3+ years in a technical security role such as detection engineering, threat hunting, incident response, or threat intelligence. • Bring practical experience analysing attacker behaviour, applying threat analysis models like MITRE ATT&CK to prioritise and improve detective controls. • Work hands-on with SIEM platforms such as Splunk, Google SecOps, Elastic, or Sentinel for rule and query creation. • Bring experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies. • Bring solid knowledge of security risks and detection strategies across AWS, GCP, and Azure. • Bring experience with EDR tools such as CrowdStrike, SentinelOne, or Cortex XDR. • Bring a good understanding of OS internals across macOS, Linux, and Windows, plus network security principles. • Bring excellent analytical, problem-solving, and communication skills. • Work as a self-starter able to lead projects while staying highly collaborative.

• Bring experience with a programming or scripting language such as Python, Go, or Bash for security automation. • Bring experience with container security monitoring across Docker and Kubernetes. • Bring experience with Detection-as-Code. • Bring experience with SOAR platforms. • Bring knowledge of digital forensics and incident response procedures. • Bring an understanding of malware analysis techniques. • Hold certifications such as GCFA, GCTD, or GIME, though none are essential.

• Design, build, test, and maintain high-fidelity detection rules and analytics in the SIEM and other security platforms. • Formulate hypotheses and hunt for undetected attacker TTPs across AWS, GCP, Azure, SaaS, and endpoint environments. • Collaborate with the Adversarial Simulation team on Purple Team exercises to test, validate, and improve detection logic and response. • Act as subject matter expert during security incidents, providing deep technical analysis and aiding remediation. • Integrate and operationalise threat intelligence to inform detection strategies and hunting projects. • Work with the wider Security Operations team and other stakeholders to uplift Starling’s security posture and improve detective controls. • Maintain clear documentation for detection rules, hunting playbooks, and processes.

• Take 25 days holiday plus your public holiday allowance whenever works best for you. • Take an extra day’s holiday for your birthday, with annual leave increasing with length of service and the option to buy or sell up to five days. • Take 16 hours of paid volunteering time a year. • Join a salary sacrifice, company enhanced pension scheme. • Get life insurance at four times salary plus group income protection. • Access private medical insurance with VitalityHealth including mental health support and cancer care, with partner discounts at Waitrose, Mr&Mrs Smith, and Peloton. • Benefit from generous family-friendly policies. • Use Perkbox membership for retail discounts and a wellness platform covering physical and mental health. • Access Cycle to Work, salary sacrificed gym partnerships, and electric vehicle leasing. • Interview entirely over video, from the initial call through to the final stage.

Starling is the UK’s first and leading digital bank, with a vision of fast technology, fair service, and honest values, all at the tap of a phone. It gives customers a new way to spend, save, and manage their money while taking better care of the planet, and has become a multi-award winning bank employing over 2,800 people across offices in London, Cardiff, Dublin, Southampton, and Manchester. Since starting in 2014 it has surpassed 3.5 million accounts and 350,000 business customers. It is a fully licensed UK bank but a tech-first company at heart, with its own platform delivering its products.