Penetration Tester – Cloud, Mobile & Web Security

Starling; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Pension scheme

Private Medical Insurance

Cycle to Work

Discount programs

Job summary

Starling is seeking an experienced Penetration Tester to join our security team. You’ll conduct mobile, web, cloud and infrastructure tests, collaborating with engineering to embed security across products.

You’ll gain deep familiarity with Starling's tech stack and help drive robust remediation actions. We value proactive testing, clear communication, and mentoring others while staying current with evolving threats and industry best practices.

Qualifications

• 5+ years technical information security experience.
• Experience in mobile, web application, cloud and infrastructure penetration testing.
• Technical knowledge in mobile, web, networking, cloud and containers/Kubernetes.

Responsibilities

• Scoping and performing mobile, web application, cloud and infrastructure penetration tests.
• Collaborating with engineering teams to facilitate secure development and identify security controls.
• Reviewing and analysing proposed technical solutions to identify adequate security measures.
• Conducting code reviews or code-assisted testing, especially in Java and Go.
• Automating security testing and developing internal tooling for continuous assurance.
• Mentoring less-experienced team members and promoting collaborative security across Starling.

Skills

Penetration testing

Mobile security

Web security

Cloud security

Kubernetes

Python/Go scripting

Code reviews

Communication skills

Education

CREST Certified Tester or equivalent

OSCP or equivalent

Tools

Java

Go

Python

Job description

Starling is seeking an experienced Penetration Tester to join our security team. You’ll conduct mobile, web, cloud and infrastructure tests, collaborating with engineering to embed security across products.

You’ll gain deep familiarity with Starling's tech stack and help drive robust remediation actions. We value proactive testing, clear communication, and mentoring others while staying current with evolving threats and industry best practices.