Information Security Analyst - SecOps Response

• Join the growing Security Operations team as an Incident Responder. • Proactively defend Starling’s customers, assets, and systems against emerging threats. • Report to the Information Security Lead for SecOps Response. • Support 24/7 operational capabilities through an on-call rota. • Work a Sunday to Thursday pattern, 09:00 to 17:30. • Investigate and contain cyber security incidents from first alert through to recovery. • Support the wider SecOps team with detection engineering and threat hunting. • Work hybrid from London, attending the office a minimum of one day per week.

• Bring 3+ years of experience in a cyber incident response and digital forensics function. • Bring experience handling incidents end to end. • Bring experience in cloud forensics across GCP and AWS. • Bring experience in endpoint and server forensics across Windows, macOS, and Linux. • Bring experience in network forensics. • Bring experience with forensic data acquisition, disk forensics, and memory forensics. • Bring experience supporting and planning tabletop exercises. • Bring an understanding of network, cloud, and operating system security controls. • Communicate excellently in writing and in person, explaining technical concepts to any audience. • Work collaboratively as part of a multi-functional team, with strong time management and problem-solving skills. • Stay eager to learn and willing to share knowledge and mentor colleagues.

• Bring experience with a programming or scripting language such as Python, Go, or Bash. • Bring experience with container security. • Bring experience conducting proactive threat hunts, defining hypotheses, and developing hunting methodologies. • Bring an understanding of malware analysis techniques. • Hold certifications such as GCFA, GCFR, or GIME, though none are essential. • Bring 13cubed training in Windows, macOS, or Linux DFIR, or similar.

• Conduct incident response activities to investigate and contain cyber security incidents. • Develop and maintain incident response and readiness processes. • Analyse logs from cloud, endpoint, and network sources to identify root cause and determine next steps for containment, eradication, and recovery. • Plan and participate in tabletop exercises. • Document notes, analysis findings, containment steps, and cause for each security incident. • Work with other teams across the organisation to analyse, contain, eradicate, and recover from incidents. • Present investigation findings to technical and non-technical audiences. • Support the wider SecOps team with detection engineering and threat hunting.

• Take 25 days holiday plus your public holiday allowance whenever works best for you. • Take an extra day’s holiday for your birthday, with annual leave increasing with length of service and the option to buy or sell up to five days. • Take 16 hours of paid volunteering time a year. • Join a salary sacrifice, company enhanced pension scheme. • Get life insurance at four times salary plus group income protection. • Access private medical insurance with VitalityHealth including mental health support and cancer care, with partner discounts at Waitrose, Mr&Mrs Smith, and Peloton. • Use Perkbox membership for retail discounts and a wellness platform covering physical and mental health. • Access Cycle to Work, salary sacrificed gym partnerships, and electric vehicle leasing. • Interview entirely over video across three stages.

Starling is the UK’s first and leading digital bank, with a vision of fast technology, fair service, and honest values, all at the tap of a phone. It gives customers a new way to spend, save, and manage their money while taking better care of the planet, and has become a multi-award winning bank employing over 2,800 people across offices in London, Cardiff, Dublin, Southampton, and Manchester. Since starting in 2014 it has surpassed 3.5 million accounts and 350,000 business customers. It is a fully licensed UK bank but a tech-first company at heart, with its own platform delivering its products.