Senior Penetration Tester

• Join an established team of talented cyber security professionals to ensure services are designed, developed, and operated securely. • Directly interact with multiple areas of the business to understand requirements, conduct research, perform security testing, and report issues aligned to the risk framework. • Gain a strong understanding of how technology works at Starling to enable in-depth testing as an internal tester.

• Have 5+ years of technical information security experience. • Have experience in mobile, web application, cloud, and infrastructure penetration testing. • Have a good foundation in mobile security for iOS and Android, web application security, networking and associated protocols, cloud security across AWS and GCP, and containers and Kubernetes. • Have a desire to learn and the ability to apply technical security knowledge to new and unfamiliar areas. • Hold penetration testing qualifications such as CREST Certified Tester or OSCP, or have equivalent industry experience. • Have experience performing code reviews or code-assisted testing, particularly in Java and Go. • Have experience in automation of security testing using Python or Go. • Demonstrate excellent verbal and written communication skills.

• Scope and perform mobile, web application, cloud, and infrastructure penetration tests. • Collaborate with engineering teams to facilitate secure development, including reviewing and analysing proposed technical solutions to identify appropriate security controls. • Conduct code reviews of features and critical security components. • Perform in-depth practical security testing. • Advise on the remediation of security issues and identify solutions to address root causes. • Automate security testing and develop internal tooling to achieve continuous assurance. • Identify and implement improvements to the team's internal processes and procedures. • Mentor less-experienced team members, leading by example in technical assessments and promoting a collaborative approach to security across Starling.

• Get 25 days holiday plus flexible public holidays, with an extra day off for your birthday. • Earn additional annual leave with length of service, and choose to buy or sell up to five extra days. • Receive 16 hours paid volunteering time a year. • Access Private Medical Insurance with VitalityHealth including mental health support and cancer care. • Receive life insurance at 4x salary and group income protection. • Benefit from generous family-friendly policies. • Access Cycle to Work, Salary Sacrificed Gym partnerships, and Electric Vehicle leasing. • Enjoy a salary sacrifice, company enhanced pension scheme. • Attend the office a minimum of 1 day per week with hybrid flexibility.

Starling is the UK's first and leading digital bank on a mission to fix banking. Built as a new kind of bank because technology has the power to help people save, spend, and manage their money in a transformative way. Starling is a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company, employing more than 3,000 people across London, Southampton, Cardiff, and Manchester offices.