Red Team Operative Full Time

“Previously Startups of London has featured Starling Bank in our article The Complete List of Unicorn Startups in the UK 2022.

You can also click on the company name above or go to their company page from here and learn more about their culture, business and management.

As for the role; Starling Bank is looking for a Red Team Operative to join their company. Learn more about the role, requirements as well as benefits in the below description. Click on the Apply Now button to complete job application.”

– Startup of London Team

The Role

We are seeking a talented Red Team operative to join Starling Bank’s red team.

Your responsibilities will include:

• Designing and executing red team operations against Starling Bank (including all scoping, planning, and reconnaissance activities)
• Identifying complex vulnerabilities and building exploits
• Continually improving the methodology and capability of the team
• Developing and documenting reusable attack components using realistic TTP
• Writing reports after each engagement

Operations will emulate real threat actors and target cutting-edge technology in Starling Bank’s platform as well as ranging across the endpoint estate. You will use emerging threat intelligence to inform and develop effective attacks.

You will be an early member of the team and have the opportunity to shape the development and growth of the team.

Requirements

You will have

• Relevant certification (e.g. CSSAS, CSSAM, OSCP, OSCE, CRT, CCT, or similar)
• Experience working in a red team and understanding the benefits and pitfalls of different adversarial techniques
• Ability to work to defined rules of engagement and to show strong discipline and steady judgement, working both independently or as part of a team
• Familiarity with the cyber risks faced by Starling Bank and other financial institutions
• Sound network and operating system fundamentals (macOS, Linux, and Windows)
• Big picture understanding of cloud security issues (AWS, GCP)
• Familiarity with modern software engineering paradigms (CI/CD, Infra as Code)

Though not necessarily required, the ideal candidate would also bring:

• Software engineering expertise (Java, Kotlin, Go…) or reverse engineering expertise
• Experience with C2 frameworks (Mythic, CobaltStrike…)
• Experience and enthusiasm for blogging and speaking both internally to educate our staff and potentially externally

Benefits

• 33 days holiday (including public hols). You’ll also get your birthday on us
• 16 hours of paid volunteering time a year
• Family-friendly leave policies
• Private Medical Insurance with VitalityHealth
• We have many varied social groups set up and run by our employees – ForTheWin (a gaming group), Starling FC, book club, and many more!
• Discounts on cinema tickets, restaurants, shopping, and train tickets via a Perkbox membership
• Access to ‘salary sacrifice’ benefits such as Cycle to Work scheme
• Gym membership options
• Season ticket travel options

About us

We are a leading digital bank on a mission to disrupt the banking industry. We’ve built an app with innovative money management tools to help our customers live healthier financial life. We also offer groundbreaking B2B banking and payments services.

Since our launch in 2014, we’ve opened almost three million accounts including 480,000 business accounts for small and medium-sized enterprises (SMEs).

We’re a fully licensed UK bank and have the culture and spirit of a fast-moving, disruptive technology company. We’ve been voted Best Current Account for the last five years running, named Which? Banking Provider of the Year for the last two and we were the most switched-to bank in 2021. We employ more than 1,800 people across our London, Southampton, and Cardiff offices.