Starling Bank

Security Operations

• - Monitor security alerts and events generated by various security tools
• - Perform triage and analysis of security incidents and anomalies, distinguishing between true positives and false positives.
• - Prioritise alerts based on severity, potential impact, and business criticality.
• - Investigate security incidents thoroughly, leveraging logs from platforms, endpoints, applications, and other security tools.
• - Create and follow incident response playbooks and contribute to their continuous improvement.
• - Collaborate with Technology, Product and Engineering Teams to contain, eradicate, and recover from security incidents.
• - Document incident details, findings, and remediation steps accurately and comprehensively.
• Additionally
• - Stay informed about the latest cyber threats, attack techniques, and vulnerabilities, especially those targeting cloud environments.
• - Participate in proactive threat hunting activities using available tools and data sources.
• - Contribute to the optimisation, tuning, and maintenance of SOC tools
• - Identify opportunities for automation to streamline security operations and enhance detection capabilities.
• - Maintain detailed records of security incidents, investigations, and remediation actions.

Security Operations Engineer

QA Engineer

• Scoping and performing mobile, web application, cloud and infrastructure penetration tests.
• Collaborating with engineering teams to facilitate secure development, including:
• - Reviewing and analysing proposed technical solutions to identify appropriate security controls.
• - Conducting code reviews of features and critical security components.
• - Performing in-depth practical security testing.
• - Advising on the remediation of security issues and identifying solutions to address root causes.
• Automating security testing and developing internal tooling to achieve continuous assurance.
• Identifying and implementing improvements to the team’s internal processes and procedures.
• Mentoring less-experienced team members, leading by example in technical assessments, and promoting a collaborative approach to security across Starling.

Senior Penetration Tester

Compliance

• Provide product specific advice as part of a high performing Conduct & Compliance Advice team on a day-to-day basis, ensuring that timely and accurate regulatory compliance and conduct related advice, guidance and support is provided, as well as independent challenge and oversight, to Starling Bank’s first line of defence (1LoD) / business teams.
• Compliance advice will cover all current (and future) products, services and activities across the Bank, as well as overarching compliance requirements, such as Consumer Duty, conduct risk, SMCR, outsourcing, product governance, vulnerable customers, complaints, conflicts of interest etc.,).
• Build strong relationships with 1LoD to deliver a collaborative working environment between Compliance and the business.
• Support with the development / implementation of the requisite conduct risk and compliance frameworks and policies in line with the Bank’s Enterprise-Wide.
• Support with the Compliance Team’s monthly reporting pack(s).
• Ability to approve and sign off financial promotions and marketing across all products and services the Bank offers.
• Oversee the submission of SMF applications to the Regulators and ensure the Bank’s Management Responsibilities Map remains up to date and accurate.

Senior Compliance Officer – 9-month FTC

Full-stack Engineer

• Own the design, implementation, and maintenance of backend services and product functionality.
• Contribute to the design of scalable, reliable systems with a strong focus on simplicity and maintainability.
• Build and improve services running in GCP, using Terraform to support infrastructure changes.
• Improve observability across our systems, including monitoring, alerting, and logging.
• Support high engineering standards through code review, technical discussion, and mentoring other engineers.

Senior Software Engineer, Ember

Financial Crime

• Design, implement, and maintain a robust Second Line Economic Crime Risk compliance program, encompassing AML, CTF, Sanctions, ABC, and Fraud prevention.
• Lead the annual Business-Wide Risk Assessment (EWRA) for Economic Crime, identifying emerging threats and directing the business on mitigation strategies.
• Define bank-wide Economic Crime policies, ensuring they meet evolving legal requirements and industry best practices.
• Act as a key support to the CCO in managing contact and information requests from regulators (FCA/PRA) regarding economic crime matters.
• Support the CCO as Chair of the Economic Crime Risk Committee by providing accurate data, management information, and technical challenge.
• Oversee bank-wide training programs to ensure all staff understand their regulatory and reporting obligations.
• Provide high-level reporting and advice to the CCO and relevant Risk Committees on the risk and control environment.

Director of Financial Crime Risk

Director

• Operate as a key part of the NA leadership team and contribute to the success of establishing Engine in the US and Canadian markets with a compelling product and platform.
• Maintain a global mindset, both learning from the global product & technology team and contributing findings to the global product roadmap for the benefit of all regions.
• Build strong relationships both internally and within client and partner organisations, from establishing initial client relationships through to implementation
• Stay abreast of current product developments and innovations globally and apply to the North American market
• Help to grow our North American Solutions Architecture team
• You will be joining a fast growing team that works globally, and you should expect international travel.
• As a company, everyone is expected to roll up their sleeves to help deliver great outcomes for our clients, we’re a small team and everyone is involved in the ‘doing’.
• Our teams tend to be hands-on and work in an Agile way, but with the flexibility to adapt to different methodologies depending on the specific client implementation.
• We are an engineering led company and we’re looking for someone who will be excited by the potential for Engine’s technology to transform banking in different markets around the world.
• Client Discovery & Delivery:
• Collaborate with our product and engineering teams through the Discovery and Implementation phases to agree on product and platform requirements
• As Engine grows in North America, provide technical leadership on implementation programmes, using your technical and product knowledge to ensure successful implementations of the Engine platform.
• Use your understanding of the Engine product and specific domain knowledge to present a clear and compelling solution to the client
• Work with prospects and clients, and with the broader North American Client Solutions team to identify and shape technical solutions to deliver a compelling and compliant product for the NA market.
• Business Development:
• Support early stage conversations, client workshops and demos, helping to identify and qualify genuine opportunities and contribute to marketing activities and conferences in NA
• Drive strategic client opportunities including supporting commercial and contractual conversations, preparing for pitches, and other marketing activities like events and thought leadership.
• Foster and maintain strong relationships with our implementation partners, driving collaborative business development activities and go-to-market strategies.

Security Operations Engineer

Senior Penetration Tester

Senior Compliance Officer – 9-month FTC

Senior Software Engineer, Ember

Director of Financial Crime Risk

Client Solutions Technical Director – Engine by Starling