Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Join our team to protect customers and systems through innovative penetration testing.
- Company: Starling Bank, the UK's leading digital bank with a tech-driven culture.
- Benefits: Enjoy 25 days holiday, private medical insurance, and flexible working options.
- Why this job: Make a real impact in fintech while collaborating with talented cyber security professionals.
- Qualifications: 5+ years in information security with strong technical knowledge in various security domains.
- Other info: Diverse and inclusive workplace with excellent career growth opportunities.
The predicted salary is between 48000 - 72000 £ per year.
Starling is the UK's first and leading digital bank on a mission to fix banking! We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. We're a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company. Our technologists are at the very heart of Starling and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech.
We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be; innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business. The way to thrive and shine within Starling is to be a self-driven individual and take full ownership of everything around you: from building things, designing, discovering, to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers.
Our purpose is underpinned by five Starling values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.
Hybrid Working: We have a Hybrid approach to working here at Starling - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person.
About The Role
As an experienced Penetration Tester you will be working with talented cyber security professionals to protect Starling customers, company assets and systems using the latest technologies and techniques. The primary objective for this role is to collaborate with, support, and guide Starling's engineering and operation functions to ensure our services are designed, developed and operated securely. As an experienced member of our penetration testing team you will directly interact with multiple areas of the business to understand requirements, define the scope and approach to testing (including undertaking appropriate research), and produce reporting information aligned to our risk framework.
In addition, we understand the importance of knowledge and expertise remaining current and you shall support the continued advancement of our penetration testing through research, design and implementation of new solutions, including automation.
Responsibilities
- Scoping and performing mobile, web application, cloud, and infrastructure penetration tests
- Automation of security testing, and development of internal tooling, to achieve continuous assurance
- Collaboration with engineering teams to facilitate secure development, including: Review and analysis of proposed technical solutions to identify appropriate security controls
- Input and guidance to security related technical architecture and design decisions
- Code review of features and critical security components
- Practical security testing
- Advising on remediation of security issues and processes to address root causes
- Security assurance reviews of third-party solutions
- Identifying and implementing improvements to the team's internal processes and procedures
- Review, analysis and reporting of external threats relevant to Starling systems and solutions, in the context of Starling's desired security posture
Requirements
We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Ideally, we would like:
- 5+ years technical information security experience
- Experience of mobile, web application, cloud and infrastructure penetration testing
- Strong technical knowledge in: Mobile security (iOS and Android), Web application security, Networking and associated protocols, Cloud security (AWS and GCP), Containers and Kubernetes
- A desire to learn, and ability to apply technical security knowledge to new and unfamiliar areas
- CREST, OSCP or similar industry penetration testing qualification
- A good understanding of applied cryptographic techniques
- Reverse engineering and exploit development capabilities
- Experience of security testing in an agile SDLC
- Threat modelling experience
- Experience performing code reviews, particularly in Java and Go
- Experience of fulfilling a client facing security consulting role
- Excellent verbal and written communication skills
- Experience in automation of security testing, with previous development experience desirable
Interview process
- First stage with the Penetration Testing Team Lead
- Second stage with additional members of the Penetration Testing team
- Final stage with Infosec Director and CISO
Benefits
- 25 days holiday (plus take your public holiday allowance whenever works best for you)
- An extra day's holiday for your birthday
- Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
- 16 hours paid volunteering time a year
- Salary sacrifice, company enhanced pension scheme
- Life insurance at 4x your salary & group income protection
- Private Medical Insurance with VitalityHealth including mental health support and cancer care
- Generous family-friendly policies
- Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
- Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing
About Us
You may be put off applying for a role because you don't tick every box. Forget that! While we can't accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren't sure if you're 100% there yet, get in touch anyway. We're on a mission to radically reshape banking - and that starts with our brilliant team. Whatever came before, we're proud to bring together people of all backgrounds and experiences who love working together to solve problems.
Starling is an equal opportunity employer, and we're proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.
Penetration Tester (Senior) employer: Starling
Contact Detail:
Starling Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Penetration Tester (Senior)
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, attend meetups, and connect with current Starling employees on LinkedIn. A friendly chat can open doors that applications alone can't.
✨Tip Number 2
Show off your skills! Consider creating a portfolio or GitHub repository showcasing your penetration testing projects. This gives us a tangible look at what you can do and sets you apart from the crowd.
✨Tip Number 3
Prepare for those interviews! Brush up on common penetration testing scenarios and be ready to discuss your thought process. We love seeing how you tackle problems and your approach to security challenges.
✨Tip Number 4
Apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you're genuinely interested in joining our mission to reshape banking!
We think you need these skills to ace Penetration Tester (Senior)
Some tips for your application 🫡
Show Your Passion for Cyber Security: When writing your application, let your enthusiasm for cyber security shine through! Share specific examples of projects or experiences that fuelled your interest in penetration testing. We love seeing candidates who are genuinely excited about the field.
Tailor Your Application: Make sure to customise your application to align with our values and the role requirements. Highlight your relevant skills and experiences that match what we’re looking for in a Senior Penetration Tester. This shows us you’ve done your homework and are serious about joining our team!
Be Clear and Concise: Keep your application straightforward and to the point. Use clear language and avoid jargon where possible. We appreciate well-structured applications that make it easy for us to see your qualifications and fit for the role.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way to ensure your application gets into the right hands. Plus, it shows us you’re proactive and keen to be part of our mission to reshape banking!
How to prepare for a job interview at Starling
✨Know Your Stuff
Make sure you brush up on your technical knowledge, especially around mobile security, web application security, and cloud security. Be ready to discuss specific tools and techniques you've used in your previous roles, as well as any relevant certifications like CREST or OSCP.
✨Show Your Problem-Solving Skills
During the interview, be prepared to walk through your thought process when tackling security issues. Starling values innovation and collaboration, so demonstrate how you've worked with teams to identify vulnerabilities and implement effective solutions.
✨Ask Insightful Questions
Prepare some thoughtful questions about Starling's approach to security and their current challenges. This shows your genuine interest in the role and helps you understand how you can contribute to their mission of fixing banking.
✨Be Yourself
Starling is all about culture fit and collaboration. Don’t hesitate to let your personality shine through during the interview. Share your experiences, your passion for cybersecurity, and how you align with their values like 'Do The Right Thing' and 'Aim For Greatness'.
