Senior Penetration Tester — Hybrid, Secure Systems & Innovation

Starling; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Job summary

Starling is recruiting an experienced Penetration Tester to join our security team in a hybrid role. You will work with cyber security professionals to ensure services are designed, developed, and operated securely, conducting testing and driving remediation within our risk framework.

You will partner with engineering to review solutions, perform in-depth testing, and help shape secure development practices across Starling’s digital platforms.

Qualifications

• 5+ years technical information security experience.
• Experience in mobile, web app, cloud and infrastructure penetration testing.
• Foundational knowledge in mobile security (iOS/Android), web app security, networking, cloud security (AWS/GCP), and containers/Kubernetes.

Responsibilities

• Scoping and performing mobile, web app, cloud and infrastructure penetration tests.
• Collaborating with engineering teams to facilitate secure development and identify security controls.
• Automating security testing and developing internal tooling for continuous assurance.
• Mentoring less-experienced team members and promoting a collaborative security culture.

Skills

5+ years experience

Mobile security

Web app security

Cloud security

Networking protocols

Containers & Kubernetes

Code reviews

Automation (Python/Go)

Excellent communication

Education

Penetration testing qualifications (CREST/OSCP)

Tools

Python

Go

AWS

Kubernetes

Job description

Starling is recruiting an experienced Penetration Tester to join our security team in a hybrid role. You will work with cyber security professionals to ensure services are designed, developed, and operated securely, conducting testing and driving remediation within our risk framework.

You will partner with engineering to review solutions, perform in-depth testing, and help shape secure development practices across Starling’s digital platforms.