Senior Penetration Tester

Salary: £65,000 - 105,000 per year

Requirements:

• We are open-minded when it comes to hiring and care more about aptitude and attitude than specific experience or qualifications.
• Ideally, you will have 5+ years of technical information security experience.
• You will have experience in mobile, web application, cloud and infrastructure penetration testing.
• You will have a good foundation in mobile security (iOS and Android), web application security, networking and associated protocols, cloud security (AWS and GCP), and containers and Kubernetes.
• You will have a desire to learn and the ability to apply technical security knowledge to new and unfamiliar areas.
• You will hold penetration testing qualifications such as CREST Certified Tester, OSCP, or equivalent industry experience.
• You will have experience performing code reviews or code-assisted testing, particularly in Java and Go.
• You will have experience automating security testing, for example using Python or Go.
• You will have excellent verbal and written communication skills.

Responsibilities:

• We scope and perform mobile, web application, cloud and infrastructure penetration tests.
• We collaborate with engineering teams to facilitate secure development.
• We review and analyse proposed technical solutions to identify appropriate security controls.
• We conduct code reviews of features and critical security components.
• We perform in-depth practical security testing.
• We advise on the remediation of security issues and identify solutions to address root causes.
• We automate security testing and develop internal tooling to achieve continuous assurance.
• We identify and implement improvements to our internal processes and procedures.
• We mentor less-experienced team members, lead by example in technical assessments, and promote a collaborative approach to security across Starling.

Technologies:

• AWS
• Android
• Cloud
• GCP
• Java
• Kubernetes
• LESS
• Mobile
• Python
• Security
• Web
• iOS
• Support

More:

We are Starling, the UKs first and leading digital bank, on a mission to fix banking with a new kind of bank built on technology. We are a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company, operating across our London, Southampton, Cardiff and Manchester offices. Our technologists are at the heart of our business, and we work in a fast-paced, flat, open culture where innovation, collaboration and ownership matter. We offer a hybrid working approach, with technology team members attending the office a minimum of 1 day per week. We also provide benefits including 25 days holiday plus public holidays, an extra day for your birthday, enhanced pension, life insurance, private medical insurance, paid volunteering time, family-friendly policies, and access to retail, wellness, gym and EV leasing perks. We welcome applicants from all backgrounds and experiences and are proud to be an equal opportunity employer.

last updated 36 week of 2026