Red Team Operator - Offensive Security & Threat Simulation

Starling Bank; Manchester; On-site; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Private Medical Insurance with Vitalty

Perkbox membership

Cycle to Work

EV leasing

Life insurance 4x salary & income-prot

Job summary

Starling Bank is seeking an experienced Offensive Security professional to join as an early member of the team in Manchester. You will design and deliver red and purple team exercises, emulate threat actors, and test resilience across cloud infrastructure and endpoints.

You will apply MITRE ATT&CK techniques, research emerging threats, and collaborate with defensive teams to remediate vulnerabilities and improve response playbooks.

Qualifications

• 2+ years of Offensive Security (Red Teaming, Pentesting) OR cyber resilience experience delivering simulations (Threat Modelling, Tabletops, Targeted Testing).
• Experience emulating real threats to test defences and response capabilities; knowledge of kill chains and MITRE TTPs.
• Certifications (CRTO, OSEP, OSMR, OSCP) OR equivalent practical experience in defensive/offensive operations.
• Familiarity with standard C2 frameworks (Mythic, Cobalt Strike) and common offensive security tooling.
• Strong fundamentals in Windows and Linux; understanding of cloud platforms (AWS, GCP) and IaC concept.

Responsibilities

• Participate in end-to-end red and purple team operations and design cyber resilience exercises.
• Emulate real-world threat actors to test defences across cloud infrastructure and endpoints.
• Research emerging threats and adapt TTPs for assessments.
• Work with defensive teams to remediate vulnerabilities and improve playbooks.
• Keep up to date with trends in offensive security and operational resilience.

Skills

Offensive security

Threat modelling

MITRE ATT&CK

C2 frameworks

Windows/Linux

Cloud (AWS/GCP)

CI/CD concepts

Communication

Education

Cybersecurity certifications

Tools

Mythic

Cobalt Strike

Job description

Starling Bank is seeking an experienced Offensive Security professional to join as an early member of the team in Manchester. You will design and deliver red and purple team exercises, emulate threat actors, and test resilience across cloud infrastructure and endpoints.

You will apply MITRE ATT&CK techniques, research emerging threats, and collaborate with defensive teams to remediate vulnerabilities and improve response playbooks.