Penetration Tester securing systems and customer assets at Starling, a digital bank. Collaborating with teams to conduct penetration tests and enhance security processes.
Responsibilities
Scoping and performing mobile, web application, cloud, and infrastructure penetration tests.
Automation of security testing, and development of internal tooling, to achieve continuous assurance.
Collaboration with engineering teams to facilitate secure development, including:
Review and analysis of proposed technical solutions to identify appropriate security controls.
Input and guidance to security related technical architecture and design decisions.
Code review of features and critical security components.
Practical security testing.
Advising on remediation of security issues and processes to address root causes.
Security assurance reviews of third-party solutions.
Identifying and implementing improvements to the team’s internal processes and procedures.
Review, analysis and reporting of external threats relevant to Starling systems and solutions, in the context of Starling’s desired security posture.
Requirements
5+ years technical information security experience.
Experience of mobile, web application, cloud and infrastructure penetration testing.
Strong technical knowledge in:
Mobile security (iOS and Android)
Web application security
Networking and associated protocols
Cloud security (AWS and GCP)
Containers and Kubernetes
A desire to learn, and ability to apply technical security knowledge to new and unfamiliar areas.
CREST, OSCP or similar industry penetration testing qualification
A good understanding of applied cryptographic techniques.
Reverse engineering and exploit development capabilities.
Experience of security testing in an agile SDLC.
Threat modelling experience.
Experience performing code reviews, particularly in Java and Go.
Experience of fulfilling a client facing security consulting role.
Excellent verbal and written communication skills.
Experience in automation of security testing, with previous development experience desirable.
Benefits
25 days holiday (plus take your public holiday allowance whenever works best for you)
An extra day’s holiday for your birthday
Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
16 hours paid volunteering time a year
Salary sacrifice, company enhanced pension scheme
Life insurance at 4x your salary & group income protection
Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton
Generous family-friendly policies
Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing
Product Tester for Consumer Tech at BurdaForward identifying and testing tech gadgets. Collaborating with teams for product evaluation and market positioning.
Quality Assurance Technician managing final functional testing and oversight during production processes. Involved in quality improvement and documentation with multi - departmental collaboration.
Lead Quality Engineer at L3Harris focusing on improving manufacturing processes. Collaborating with teams to analyze, implement, and sustain effective quality assurance methods in defense and aerospace sectors.
Quality Assurance Supervisor directing and coordinating quality assurance within the Plant Quality Assurance Department at J.R. Simplot Company in Caldwell, ID.
Quality Assurance Technician conducting qualitative and quantitative testing of beverages and raw materials at Coca - Cola Southwest Beverages. Ensuring product quality and compliance throughout the production process.
Quality Assurance Intern supporting key initiatives while gaining hands - on experience in the medical device industry. The role requires onsite availability at least three days per week during Summer or Fall 2026.
Quality Assurance Engineer I testing Disney’s media products and ensuring the highest quality level. Collaborating with developers and stakeholders to communicate defects and enhancements.
Associate Quality Engineer ensuring quality processes at Boeing with data analytics and root cause investigations. Supporting production lines in Illinois with weekly travel between sites.
QA Engineer ensuring applications are stable and user - friendly at apo.com Group. Collaborates closely with development and product management to execute testing strategies.