Threat Emulation Engineer (Red Team)

Starling; Southampton; On-site; GBP 70,000 - 120,000; Full time

Benefits offered by this job

Private Medical Insurance

Pension scheme

33 days holiday

Birthday day off

Cycle to Work

Volunteering time

Job summary

Starling Bank is seeking an experienced cyber security professional to join our Offensive Security team. You will participate in end-to-end red and purple team operations and design targeted simulations across cloud and endpoint environments.

You will emulate real threats, apply MITRE ATT&CK techniques, and work with defensive teams to strengthen resilience, detection, and incident response in a fast-paced fintech setting.

Qualifications

• 2+ years in Offensive Security (Red Teaming or Pentesting) or cyber resilience roles.
• Experience emulating real threats and understanding MITRE TTPs.
• Certifications or equivalent hands-on cyber security experience.

Responsibilities

• Design and execute red and purple team operations and cyber resilience exercises.
• Emulate threat actors, test defences across cloud and endpoint.
• Identify threats, update playbooks, remediate vulnerabilities post-engagement.
• Collaborate with defensive teams and keep up with trends.
• Stage and debrief security exercises with stakeholders.

Skills

Offensive Security

Threat Modelling

MITRE ATT&CK

Networking fundamentals

Cloud (AWS/GCP)

CI/CD / IaC

Communication skills

Disciplined / integrity

Education

CRTO

OSEP

OSMR

OSCP

Tools

Mythic

Cobalt Strike

PowerShell

Python

Go

Bash

Windows

Linux

Job description

Starling Bank is seeking an experienced cyber security professional to join our Offensive Security team. You will participate in end-to-end red and purple team operations and design targeted simulations across cloud and endpoint environments.

You will emulate real threats, apply MITRE ATT&CK techniques, and work with defensive teams to strengthen resilience, detection, and incident response in a fast-paced fintech setting.