Red Team Security Engineer

Starling Bank; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Life Insurance

Private Medical Insurance

Pension scheme

Cycle to Work

Job summary

Starling Bank is seeking an experienced cyber security professional to join our offensive security team, focusing on red teaming, threat emulation, and resilience testing across cloud and endpoint environments. You will work with defenders to improve detection, response and playbooks, while applying MITRE ATT&CK techniques and staying current with emerging threats.

This role offers hands-on experimentation, strong collaboration and the chance to shape security practices at a fast-growing digital

Qualifications

• 2+ years in Offensive Security or cyber resilience.
• Experience emulating real-world cyber threats and MITRE TTPs.
• Certifications or equivalent practical experience in defensive, offensive, or cyber resilience ops.
• Familiarity with standard C2 frameworks and offensive security tooling.
• Strong fundamentals in Windows and Linux.
• Understanding of cloud tech (AWS & GCP) and modern software engineering (CI/CD, IaC).
• Ability to operate under defined rules of engagement and bridge exploits to business recovery.

Responsibilities

• Participate in end-to-end red and purple team operations and design cyber resilience exercises.
• Emulate real threat actors and test defenses across cloud infrastructure and endpoints.
• Research emerging threats and adapt threat actor TTPs for assessments.
• Remediate vulnerabilities with defensive teams and refine playbooks.
• Stay updated on trends in offensive security and operational resilience.

Skills

Offensive Security

Red Teaming

Penetration Testing

MITRE ATT&CK

AWS/GCP Cloud

Windows

Linux

Python Scripting

PowerShell

CI/CD / IaC

Education

CRTO / OSEP / OSCP

Tools

Mythic

Cobalt Strike

Job description

Starling Bank is seeking an experienced cyber security professional to join our offensive security team, focusing on red teaming, threat emulation, and resilience testing across cloud and endpoint environments. You will work with defenders to improve detection, response and playbooks, while applying MITRE ATT&CK techniques and staying current with emerging threats.

This role offers hands-on experimentation, strong collaboration and the chance to shape security practices at a fast-growing digital