FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Red Team Operator – Cyber Resilience
Starling Bank. Participate in end-to-end red and purple team operations .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Offensive Security and Cyber Resilience, with a strong focus on threat modeling, penetration testing, and the application of MITRE ATT&CK frameworks. Capable of enhancing organizational security posture through continuous learning and effective communication.
Highest-signal resume keywords
Offensive Security ExperienceCyber Resilience ExpertiseMITRE ATT&CK FrameworksRelevant Industry CertificationsCloud Technology Understanding
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Red TeamingPentestingThreat ModelingTargeted TestingPayload ModificationScripting (Python, Go, PowerShell, Bash)Software Engineering (Java, Kotlin, Go)Understanding of Cyber Kill ChainsNetwork FundamentalsOperating System Fundamentals (Windows, Linux, macOS)
Soft Skills
Strong DisciplineIntegritySteady JudgementCommunication Skills
Tools & Technologies
C2 Frameworks (Mythic, Cobalt Strike)Cloud Platforms (AWS, GCP)CI/CDInfrastructure as Code
Certifications & Qualifications
CRTOOSEPOSMROSCP
Industry Keywords
Cyber ResilienceFinancial Sector Penetration Testing FrameworksCBESTSTARDORA
Tech Stack
Tools & technologiesAWSCloudCyber SecurityGoogle Cloud PlatformJavaKotlinLinuxMacOSPythonGo
About the role
Key responsibilities & impact- Participate in end-to-end red and purple team operations
- Design and deliver cyber resilience exercises, including threat modelling, tabletops, targeted testing, and simulations
- Emulate real-world threat actors using MITRE ATT&CK to test defences across cloud infrastructure and endpoint estates
- Conduct research to identify emerging threats and vulnerabilities
- Adapt threat actor tactics, techniques, and procedures for use during assessments
- Work with defensive teams after engagements to remediate vulnerabilities
- Refine security playbooks and improve the organisation's security and resilience posture
- Engage in continuous learning and professional development
- Help shape the development and growth of the early-stage team
Requirements
What you’ll need- 2+ years of experience in Offensive Security (Red Teaming, Pentesting) OR highly technical other cyber security domains
- Alternatively, Cyber Resilience experience in delivering Response and Recovery focused cyber simulations (Threat Modelling, Tabletops, Targeted Testing)
- Experience emulating real-world cyber threats to test the organisation's defences and response capabilities
- Understanding cyber kill chains and common MITRE TTPs
- Relevant industry certifications (e.g., CRTO, OSEP, OSMR, OSCP) OR equivalent practical experience in defensive, offensive, or cyber resilience operations
- Familiarity with standard C2 frameworks (e.g., Mythic, Cobalt Strike) and common offensive security tooling
- Strong network and operating system fundamentals, including Windows and Linux
- Big picture understanding of cloud technology (AWS and GCP)
- Understanding of modern software engineering paradigms, including CI/CD and Infrastructure as Code
- Ability to work to defined rules of engagement
- Strong discipline, integrity, steady judgement, and communication skills to bridge technical exploits and business recovery
- Experience chaining offensive operations directly into broader organisational resilience or response exercises is advantageous
- Exposure to financial sector threat-led penetration testing frameworks (e.g., CBEST, STAR, or DORA) or operational resilience regulations is advantageous
- Deep understanding of macOS operating system fundamentals is advantageous
- Experience in payload modification, scripting (Python, Go, PowerShell, bash), or software engineering (Java, Kotlin, Go) is advantageous
- Experience in social engineering such as phishing, physical break-in, or vishing is advantageous
- Experience and enthusiasm for sharing knowledge internally to educate staff on the threat landscape and response processes is advantageous
Benefits
Comp & perks- 33 days holiday (including public holidays, which you can take when it works best for you)
- An extra day’s holiday for your birthday
- Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
- 16 hours paid volunteering time a year
- Salary sacrifice, company enhanced pension scheme
- Life insurance at 4x your salary & group income protection
- Private Medical Insurance with VitalityHealth including mental health support and cancer care
- Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton
- Generous family-friendly policies
- Incentives refer a friend scheme
- Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
- Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing
- Flexible working requests are open to discussion