Red Team Operator: Threat Emulation & Cyber Resilience

Starling; Greater London; On-site; GBP 60,000 - 110,000; Full time

Benefits offered by this job

33 days holiday

Private Medical Insurance

Pension scheme

Job summary

Starling Bank is seeking an Offensive Security Engineer to join our security team and help defend and test our cloud‑native platform. You will design and execute red team operations, threat modelling, tabletop exercises and simulations to evaluate our detection, response and recovery capabilities.

Collaborating with defensive teams, you’ll translate technical exploits into business risk insights and help harden our systems across AWS and on‑premise endpoints.

Qualifications

• 2+ years of experience in Offensive Security (Red Teaming, Pentesting) OR cyber resilience simulations.
• Experience emulating real-world threats to test defenses and response capabilities.
• Familiarity with standard C2 frameworks (Mythic, Cobalt Strike) and offensive security tooling.
• Strong knowledge of Windows and Linux fundamentals; cloud tech (AWS, GCP).
• Ability to operate under defined rules of engagement with clear communication to bridge exploits and business recovery.

Responsibilities

• Design and execute end-to-end red and purple team operations and cyber resilience exercises.
• Emulate real-world threat actors and apply MITRE ATT&CK to test defenses across cloud and endpoints.
• Utilize research time to identify threats and adapt TTPs for assessments.
• Collaborate with defensive teams to remediate vulnerabilities and improve resilience posture.
• Stay current with trends in offensive security and operational resilience.

Skills

Red Teaming

Pentesting

Threat Modelling

MITRE ATT&CK

Cloud security (AWS, GCP)

Cobalt Strike

Mythic

Python

PowerShell

Windows

Education

OSCP

OSEP

CRTO

OSMR

Cyber security certifications

Tools

Mythic

Cobalt Strike

Python

Go

PowerShell

Job description

Starling Bank is seeking an Offensive Security Engineer to join our security team and help defend and test our cloud‑native platform. You will design and execute red team operations, threat modelling, tabletop exercises and simulations to evaluate our detection, response and recovery capabilities.

Collaborating with defensive teams, you’ll translate technical exploits into business risk insights and help harden our systems across AWS and on‑premise endpoints.