Location
London

Hours
Full Time

Salary
Competitive salary

About the Role
Starling is the UK’s first and leading digital bank on a mission to fix banking. We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. We’re a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company. Our technologists work in a fast-paced environment focused on building innovative solutions and disruptive technology that keeps us at the cutting edge of fintech. We operate a flat structure empowering you to make decisions and collaborate across teams. Our open culture ensures support is always available, and we value self-driven individuals who take full ownership of their work, from design to delivery and knowledge sharing. Our purpose is underpinned by five Starling values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.

We have a hybrid working approach, preferring candidates located within a commutable distance of one of our offices. In Technology, attendance at the office is expected at least one day per week.

As a Senior Penetration Tester, you will join an established team of talented cyber security professionals to ensure our services are designed, developed and operated securely. This collaborative role involves working closely with multiple business areas to understand requirements, conduct research, perform security testing, and report issues aligned to our risk framework. Being an internal tester, you will gain a deep understanding of Starling’s technology to enable thorough testing and support remediation processes, turning findings into tangible security improvements.

We actively support your professional growth through research and training, and you will contribute to continuously improving our testing processes, methodologies and tools to maintain the highest standards.

Responsibilities
- Scoping and performing mobile, web application, cloud and infrastructure penetration tests
- Collaborating with engineering teams to facilitate secure development, including reviewing and analysing proposed technical solutions to identify appropriate security controls
- Conducting code reviews of features and critical security components
- Performing in-depth practical security testing
- Advising on remediation of security issues and identifying solutions to address root causes
- Automating security testing and developing internal tooling for continuous assurance
- Identifying and implementing improvements to team processes and procedures
- Mentoring less-experienced team members, leading by example in technical assessments, and promoting a collaborative approach to security across Starling

Experience
- 5+ years technical information security experience
- Experience in mobile, web application, cloud and infrastructure penetration testing
- Technical knowledge across mobile security (iOS and Android), web application security, networking and associated protocols, cloud security (AWS and GCP), containers and Kubernetes
- Experience performing code reviews or code-assisted testing, particularly in Java and Go
- Experience in automation of security testing using languages such as Python or Go

About you
- Open-minded with a strong aptitude and positive attitude
- Desire to learn and ability to apply technical security knowledge to new and unfamiliar areas
- Excellent verbal and written communication skills

Qualifications
- Penetration testing qualifications such as CREST Certified Tester, OSCP or equivalent industry experience are preferred but not mandatory