Senior Penetration Tester - Hybrid & Impactful

Starling; Cardiff; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid work

Private medical insurance

Birthday day off

Cycle to work

Job summary

Starling is seeking an experienced Penetration Tester to join our fast-moving cyber security team. You will perform mobile, web, cloud and infrastructure testing to validate controls and improve overall security posture.

You will collaborate with engineering, contribute to remediation, and help advance our risk framework through tooling and process improvements. The role emphasises hands-on testing and knowledge sharing in a dynamic fintech environment.

Qualifications

• 5+ years of technical information security experience.
• Experience in mobile, web application, cloud and infrastructure penetration testing.
• Strong foundation in mobile security (iOS and Android).
• Strong knowledge of web application security.
• Understanding of networking and related protocols.
• Cloud security experience (AWS and GCP).
• Containers and Kubernetes knowledge.
• Penetration testing qualifications (e.g., CREST or OSCP) or equivalent experience.
• Experience in code reviews or code-assisted testing (Java and Go).
• Automation of security testing (Python or Go).
• Excellent verbal and written communication skills.

Responsibilities

• Scoping and performing mobile, web, cloud and infrastructure penetration tests.
• Collaborating with engineering teams to facilitate secure development, including reviewing solutions, code reviews, testing, remediation guidance.
• Automating security testing and developing internal tooling.
• Mentoring teammates and improving security processes.

Skills

Penetration testing

Mobile security

Web security

Cloud security

Kubernetes

Code reviews

Automation testing

Communication skills

Tools

Python

Go

Java

Job description

Starling is seeking an experienced Penetration Tester to join our fast-moving cyber security team. You will perform mobile, web, cloud and infrastructure testing to validate controls and improve overall security posture.

You will collaborate with engineering, contribute to remediation, and help advance our risk framework through tooling and process improvements. The role emphasises hands-on testing and knowledge sharing in a dynamic fintech environment.