Red Team Operator

Who you are

• 2+ years of experience in Offensive Security (Red Teaming, Pentesting) OR highly technical other cyber security domains. Alternatively, Cyber Resilience experience in delivering Response and Recovery focused cyber simulations (Threat Modelling, Tabletops, Targeted Testing)
• Experience emulating real-world cyber threats to test the organisation's defences and response capabilities. Understanding cyber kill chains and common MITRE TTPs
• Relevant industry certifications (e.g., CRTO, OSEP, OSMR, OSCP) OR equivalent practical experience in defensive, offensive, or cyber resilience operations
• Familiarity with standard C2 frameworks (e.g., Mythic, Cobalt Strike) and common offensive security tooling
• Strong network and operating system fundamentals e.g Windows, Linux
• Big picture understanding of cloud technology (AWS & GCP) and modern software engineering paradigms (CI/CD, Infrastructure as Code)
• Ability to work to defined rules of engagement, showing strong discipline, integrity, steady judgement, and the communication skills to bridge the gap between technical exploits and business recovery
• Experience chaining offensive operations directly into broader organisational resilience or response exercises
• Exposure to financial sector threat-led penetration testing frameworks (e.g., CBEST, STAR, or DORA) or operational resilience regulations
• Deep understanding of macOS operating system fundamentals
• Experience in payload modification, scripting (Python, Go, PowerShell, bash), or software engineering (Java, Kotlin, Go)
• Experience in Social Engineering such as phishing, physical break-in, or vishing
• Experience and enthusiasm for sharing knowledge internally to educate staff on the threat landscape and response processes
• You may be put off applying for a role because you don't tick every box. Forget that!

What the job involves

• Participating in end-to-end red and purple team operations, as well as designing and delivering cyber resilience exercises (e.g. threat modelling, tabletops, targeted testing, and simulations that evaluate Starling's response and recovery capabilities)
• Emulating real-world threat actors and leveraging MITRE ATT&CK to test the organisation's defences across both cutting-edge cloud infrastructure and the endpoint estate
• Utilising dedicated research time to identify emerging threats, understand new vulnerabilities, and adapt Threat Actor TTPs that can be leveraged during assessments
• Working alongside defensive teams post-engagement to actively remediate vulnerabilities, refine playbooks, and improve the overall security and resilience posture of the organization
• Engaging in continuous learning and professional development, keeping up to date with current trends in both offensive security and operational resilience
• Operations will emulate real threat actors and target cutting edge technology in Starling Bank’s platform as well as ranging across the endpoint estate. You will use emerging threat intelligence to inform and develop effective attacks
• You will be an early member of the team and have the opportunity to shape the development and growth of the team

The application process

• Interviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team:
• Stage 1 - 45 mins with one of the team
• Stage 2 - 60 mins technical interview with two team members
• Stage 3 - 45 min final with two executives

Benefits

• Time off: 25 days holiday, plus your birthday as an extra freebie. You can also opt out of bank holidays and take them when works for you!
• Health insurance: Private health insurance with Vitality Health, one of the UK's leading private medical insurers
• Pension scheme
• Paid volunteering leave: We encourage all our employees to give back. You can take up to 16 hours paid leave a year, specifically to help causes meaningful to you
• Gym & cycle to work schemes: We offer discounted gym memberships and cycle to work schemes through salary sacrifice
• Perkbox: For a wide range of retail, entertainment and leisure discounts (as well as cash back) at a huge variety of businesses