Red Team Operative

We are seeking a talented Red Team operative to join Starling Bank’s red team.

Your responsibilities will include:

• Designing and executing red team operations against Starling Bank (including all scoping, planning and reconnaissance activities)
• Identifying complex vulnerabilities and building exploits
• Continually improving the methodology and capability of the team
• Developing and documenting reusable attack components using realistic TTPs
• Writing reports after each engagement

Operations will emulate real threat actors and target cutting edge technology in Starling Bank’s platform as well as ranging across the endpoint estate. You will use emerging threat intelligence to inform and develop effective attacks.

You will be an early member of the team and have the opportunity to shape the development and growth of the team.

Requirements

You will have:

• Relevant certification (e.g. CSSAS, CSSAM, OSCP, OSCE, CRT, CCT, or similar)
• Experience of working in a red team and understanding of the benefits and pitfalls of different adversarial techniques
• Ability to work to defined rules of engagement and to show strong discipline and steady judgement, working both independently or as part of a team
• Familiarity with the cyber risks faced by Starling Bank and other financial institutions
• Sound network and operating system fundamentals (MacOS, Linux and Windows)
• Big picture understanding of cloud security issues (AWS, GCP)
• Familiarity with modern software engineering paradigms (CI/CD, Infra as Code)

Though not necessarily required, the ideal candidate would also bring:

• Software engineering expertise (Java, Kotlin, Go…) or reverse engineering expertise
• Experience with C2 frameworks (Mythic, CobaltStrike…)
• Experience and enthusiasm for blogging and speaking both internally to educate our staff and potentially externally

Benefits

• 33 days holiday (including public hols). You’ll also get your birthday on us
• 16 hours paid volunteering time a year
• Family friendly leave policies
• Private Medical Insurance with VitalityHealth
• We have many varied social groups set up and run by our employees - ForTheWin (a gaming group), Starling FC, book club and many more!
• Discounts on cinema tickets, restaurants, shopping and train tickets via a Perkbox membership
• Access to ‘salary sacrifice’ benefits such as Cycle to Work scheme
• Gym membership options
• Season ticket travel options
• Full details are available on our careers site

About us:

We are a leading digital bank on a mission to disrupt the banking industry. We’ve built an app with smart money management tools to help our customers live a healthier financial life. We also offer groundbreaking B2B banking and payments services.

Since our launch in 2014, we’ve opened almost three million accounts including 480,000 business accounts for small and medium-sized enterprises (SMEs).

We’re a fully licensed UK bank and we have the culture and spirit of a fast-moving, disruptive technology company. We’ve been voted Best Current Account for the last five years running, named Which? Banking Provider of the Year for the last two and we were the most switched to bank in 2021. We employ more than 1,800 people across our London, Southampton and Cardiff offices.

Starling Bank is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.

By submitting your application, you agree that Starling Bank may collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we may process, where we may process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.