Overview
In this role you will work with our cyber security team to protect Starling’s customers and assets by conducting comprehensive penetration testing across mobile, web, cloud, and infrastructure. You will collaborate with engineering and operations to ensure secure design, development and operation of services, and you will contribute to the ongoing advancement of testing capabilities and automation. The position offers exposure to a fast-paced fintech environment and a chance to shape secure practices across the SDLC. You will report into the Cyber Security function and engage with multiple business areas to define scope, perform testing, and produce risk-aligned findings. This is an ideal机会为
Pay / Benefits
- 25 days holiday
- birthday leave
- pension scheme
- life insurance 4x salary
- private medical insurance
- Waitrose/ Peloton/ Mr & Mrs Smith discounts
Responsibilities
- Scoping and performing mobile, web application, cloud, and infrastructure penetration tests
- Automating security testing and developing internal tooling for continuous assurance
- Collaborating with engineering to enable secure development and advise on security controls
- Conducting code reviews of security-critical components and features
- Providing remediation guidance and root-cause analysis for security issues
- Security assurance reviews of third-party solutions
- Suggesting improvements to internal security processes
- Analyzing external threats and updating risk posture reporting
Key requirements
- 5+ years in technical information security
- Experience in mobile, web app, cloud and infrastructure pentesting
- Strong knowledge of mobile security, web security, networking, cloud security (AWS and GCP), containers and Kubernetes
- Desire to learn and apply security knowledge to new areas
- CREST, OSCP or similar qualification
- Understanding of applied cryptography
- Reverse engineering and exploit development capabilities
- Experience in agile SDLC security testing
- Threat modelling experience
- Code reviews in Java and Go
- Client-facing security consulting experience
- Automation of security testing; development experience desirable
- excellent verbal and written communication
- collaboration with cross-functional teams
- curiosity and proactive problem solving
- Mobile security (iOS and Android)
- Web application security
- Networking and protocols
…