Red Team Operator - FinTech Cyber Resilience

Starling; Southampton; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Holiday

Pension

Private Medical

Volunteer Time

Cycle to Work

Job summary

Starling Bank is seeking an experienced cyber security professional to join our offensive security team in the UK. You will design and execute red and purple team exercises, emulate real threat actors and test our defences across cloud and on-premises.

You will work with defensive squads, develop playbooks, and stay current with MITRE ATT&CK, CI/CD, and cloud security practices. This is an opportunity to shape our resilience culture at a fast-growing fintech.

Qualifications

• 2+ years in Offensive Security or equivalent cyber resilience simulations
• Experience emulating cyber threats and knowledge of kill chains and MITRE TTPs
• Certifications like CRTO, OSEP, OSMR, OSCP or equivalent experience
• Familiarity with C2 frameworks (Mythic, Cobalt Strike) and offensive tooling
• Solid Windows and Linux fundamentals
• Understanding cloud tech (AWS & GCP) and IaC/CI/CD
• Ability to operate under defined rules of engagement and bridge technical with business recovery

Responsibilities

• Participating in end-to-end red and purple team operations, designing and delivering cyber resilience exercises
• Emulating real-world threat actors using MITRE ATT&CK to test defences across cloud infrastructure and endpoints
• Researching emerging threats and adapting Threat Actor TTPs for assessments
• Working with defensive teams to remediate vulnerabilities and improve resilience
• Engaging in continuous learning about offensive security and resilience trends

Skills

Offensive Security

Red Teaming

MITRE ATT&CK

C2 Frameworks

AWS/GCP

Windows/Linux

CI/CD IaC

Threat Modelling

Communication

Security Testing

Education

Certifications

Tools

Mythic

Cobalt Strike

Python

PowerShell

Go

Job description

Starling Bank is seeking an experienced cyber security professional to join our offensive security team in the UK. You will design and execute red and purple team exercises, emulate real threat actors and test our defences across cloud and on-premises.

You will work with defensive squads, develop playbooks, and stay current with MITRE ATT&CK, CI/CD, and cloud security practices. This is an opportunity to shape our resilience culture at a fast-growing fintech.