At a Glance
- Tasks: Join a talented team to conduct security testing and improve our services.
- Company: Starling, a forward-thinking bank prioritising security and collaboration.
- Benefits: 25 days holiday, private medical insurance, and wellness perks.
- Other info: Diverse workplace committed to inclusion and continuous improvement.
- Why this job: Make a real impact on security while advancing your skills in a supportive environment.
- Qualifications: 5+ years in information security with a focus on penetration testing.
The predicted salary is between 60000 - 80000 € per year.
As an experienced Penetration Tester at Starling, you’ll be joining an established team, working with talented cyber security professionals to ensure our services are designed, developed and operated securely. This is a collaborative role – you’ll directly interact with multiple areas of the business to understand requirements, conduct research, perform security testing, and report issues aligned to our risk framework. Being an internal tester, you’ll gain a strong understanding of how technology works at Starling to enable in‑depth testing. You’ll also support remediation processes, seeing your findings lead to tangible security improvements. We understand the importance of knowledge and expertise remaining current, so we’ll actively support your advancement through research and training. In turn, you’ll help us continuously improve our processes, methodologies and tools to maintain the highest standard of testing. We’re open‑minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications.
Responsibilities
- Scoping and performing mobile, web application, cloud and infrastructure penetration tests.
- Collaborating with engineering teams to facilitate secure development, including:
- Reviewing and analysing proposed technical solutions to identify appropriate security controls.
- Conducting code reviews of features and critical security components.
- Performing in‑depth practical security testing.
- Advising on the remediation of security issues and identifying solutions to address root causes.
- Automating security testing and developing internal tooling to achieve continuous assurance.
- Identifying and implementing improvements to the team’s internal processes and procedures.
- Mentoring less‑experienced team members, leading by example in technical assessments, and promoting a collaborative approach to security across Starling.
Qualifications
- 5+ years technical information security experience.
- Experience in mobile, web application, cloud and infrastructure penetration testing.
- Technical knowledge – a good foundation in mobile security (iOS and Android), web application security, networking and associated protocols, cloud security (AWS and GCP), containers and Kubernetes.
- A desire to learn, and the ability to apply technical security knowledge to new and unfamiliar areas.
- Penetration testing qualifications (e.g. CREST Certified Tester, OSCP) or equivalent industry experience.
- Experience performing code reviews or code‑assisted testing, particularly in Java and Go.
- Experience in automation of security testing (e.g. using Python or Go).
- Excellent verbal and written communication skills.
Interview Process
- First stage with the Penetration Testing Team Lead.
- Second stage with additional members of the Penetration Testing team.
- Final stage with Infosec Director and CISO.
Benefits
- 25 days holiday (plus public holiday allowance).
- Extra day’s holiday for your birthday.
- Annual leave increased with length of service, and you can choose to buy or sell up to five extra days off.
- 16 hours paid volunteering time a year.
- Salary sacrifice, company enhanced pension scheme.
- Life insurance at 4× your salary & group income protection.
- Private Medical Insurance with VitalityHealth including mental health support and cancer care.
- Partner benefits include discounts with Waitrose, Mr & Mrs Smith and Peloton.
- Generous family‑friendly policies.
- Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks.
- Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing.
Equal Opportunities
Starling is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.
Senior Penetration Tester in London employer: Starling Bank Limited
At Starling, we pride ourselves on being an exceptional employer, offering a dynamic work environment where collaboration and innovation thrive. As a Senior Penetration Tester, you'll benefit from extensive professional development opportunities, including training and mentorship, while enjoying a generous benefits package that includes 25 days of holiday, private medical insurance, and family-friendly policies. Our commitment to diversity and inclusion ensures that every team member feels valued and empowered to contribute to our mission of maintaining the highest security standards.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Penetration Tester in London
✨Tip Number 1
Network like a pro! Reach out to your connections in the cyber security field, especially those who work at Starling or similar companies. A friendly chat can lead to insider info about job openings and even referrals.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your penetration testing projects, including any automation tools you've developed. This will give potential employers a taste of what you can bring to the table.
✨Tip Number 3
Prepare for interviews by brushing up on common penetration testing scenarios. Practice explaining your thought process during tests and how you approach remediation. This will help you stand out during the interview stages.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in joining the team at Starling.
We think you need these skills to ace Senior Penetration Tester in London
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Senior Penetration Tester role. Highlight your relevant experience in mobile, web application, and cloud security testing. We want to see how your skills align with what we’re looking for!
Show Off Your Skills:In your written application, don’t just list your qualifications – show us how you’ve applied them in real-world scenarios. Share specific examples of penetration tests you've conducted and the impact they had on security improvements.
Be Clear and Concise:When writing your application, keep it clear and concise. Use straightforward language to explain your technical knowledge and experience. We appreciate a well-structured application that’s easy to read!
Apply Through Our Website:We encourage you to apply through our website for the best chance of getting noticed. It’s the easiest way for us to track your application and ensure it reaches the right people. Don’t miss out!
How to prepare for a job interview at Starling Bank Limited
✨Know Your Stuff
Make sure you brush up on your technical knowledge, especially in mobile security, web application security, and cloud security. Be ready to discuss specific tools and methodologies you've used in your previous roles, as this will show your depth of understanding.
✨Show Your Collaborative Spirit
Since this role involves working closely with engineering teams, be prepared to share examples of how you've collaborated in the past. Highlight any experiences where you’ve facilitated secure development or mentored less-experienced team members.
✨Prepare for Practical Testing Scenarios
Expect to be tested on your practical skills during the interview. Brush up on scoping and performing penetration tests, and be ready to walk through your thought process when identifying security issues and suggesting remediation strategies.
✨Communicate Clearly
Excellent verbal and written communication skills are a must. Practice explaining complex security concepts in simple terms, as you'll need to convey your findings effectively to various stakeholders within the company.
