About the Starling GroupWe are Starling. We started by building a new kind of bank because we knew technology had the power to transform how people save, spend, and manage their money. Today, our ambition and our footprint have grown.Our ecosystem encompasses our pioneering, fully licensed UK bank (Starling), our global Software-as-a-Service technology platform (Engine by Starling), alongside a growing portfolio of specialist financial and software businesses.While our roots are in the UK, our operations are expanding globally. Though you may be based in one of our international offices (such as Sydney or Toronto), this role is critical to the entire Starling Group. The work you do will support, empower, and protect our businesses worldwide.Our technologists are at the very heart of Starling and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and leveraging disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to enable you to make decisions regardless of your location or primary responsibilities; innovation and collaboration will be at the core of everything you do. Help is never far away in our open, borderless culture - you will find support in your team and from across the global business. We are in this together!The way to thrive and shine within Starling is to be a self-driven individual and take full ownership of everything around you: from building, discovering, and solving complex problems, to sharing knowledge with your international colleagues to ensure all processes are efficient and productive. Our purpose across all our businesses is underpinned by five Starling values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.Hybrid WorkingWe have a Hybrid approach to working here at Starling - our preference is that you're located within a commutable distance of place of work in Sydney, so that we're able to interact and collaborate in person. About the RoleTo support our growth, we are looking for an experienced SOC Team Lead with Incident Response experience to join our growing cyber security function. This role will be supporting our 24/7 operational capabilities by providing coverage in working hours from Sydney and Toronto alongside our UK colleagues. As a member of the Starling Group’s SOC team, you will be working with the industry's brightest SecOps professionals to protect Starling Group’s customers, assets, and systems using the latest technologies.Lead a team of subject matter experts and analysts to ensure Information Security is managed and continuously improved in line with Bank policy and procedure.Supporting the development and progression of the Information Security Analyst team from both a technical and professional perspective.Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include: - Cloud Infrastructure/Security.- Endpoint Detection and Response.- Perimeter detection tooling.Conduct Quality Assurance for Triage case handling, mitigation actions and shift handover, collating lessons learned and implementing improvements where required.Interpret logs from a variety of sources (e.g. cloud, endpoint, network) to identify root cause and determine next steps for containment, eradication and recovery as part of incident response activities.Work together with other teams in the organisation to analyse, contain, eradicate and recover from cyber security incidentsContinuous development and maintaining of incident handling, response and readiness processes.Support the wider SecOps team with detection engineering - creating and optimising analytic triggers to enhance alert efficacy - and threat hunting based on threat intelligence.Documentation of incidents and investigations, including analysis findings, containment steps and root cause.Plan and participate in Tabletop Exercises.Present investigation findings to technical and non-technical audiences.RequirementsWe’re open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Below is an overview:5+ years experience in an in-house SOC role and team, including cyber incident response and digital forensics function.Experience in a similar role leading, developing and motivating a team of subject matter experts and other managers in Information and Cyber Security.Understanding of AWS Security Solutions (or other Public Cloud Solutions)Analysis and Incident Response experience with Cloud systems (GCP, AWS)Experience working and supporting analytics/SIEM platforms.Experience supporting and conducting Incident Response engagements.Experience in endpoint based investigations.Experience in cloud based investigations.Experience with Incident Command and conducting Tabletop Exercises.Experience in acting as both Commander and SME during incidents and investigations.Be a Self Starter with the ability to lead, inspire and drive change through an organisation.Excellent communication skills (both verbal and written), ability to communicate technical concepts to both technical and non-technical audiences.Demonstrated teamwork and collaboration skills as part of a multi-functional teamTime management, problem-solving and interpersonal skills.Eagerness to learn and apply knowledge to new security challenges.Willingness to share knowledge with the team and mentor colleagues.A high level understanding of mobile, network and operating system security controls.PreferredExperience in forensics: cloud (GCP, AWS); endpoint/server (Windows, MacOS, Linux); and/or network.Any experience of programming in Python, Go and/or Java.A Cyber/Information Security related degree and/or relevant cyber security qualification(s) would be desired but not requiredUnderstanding of malware analysis techniquesInterview ProcessInterviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team:First Interview: 45 minutesTechnical Interview: 90 minutesFinal Interview: 30 minutesPlease NoteWe require our successful candidates to pass background checks (including but not limited to employment references, fraud checks, financial probity, social media, and criminal history).Starling welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.Benefits25 days holiday. You’ll also get your birthday on usThe option to opt-out of public holidaysThe option to buy/sell up to 5 days of annual leave a year16 hours paid volunteering time a yearEnhanced Pat & Mat leavePerkboxLength of service increased annual leaveYou may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway. We’re on a mission to radically reshape banking – and that starts with our brilliant team. Whatever came before, we’re proud to bring together people of all backgrounds and experiences who love working together to solve problems.Starling is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law. When you provide us with this information, you are doing so at your own consent, with full knowledge that we will process this personal data in accordance with our Privacy Notice. By submitting your application, you agree that the Starling Group will collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we will process, where we will process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.
About the Starling Group
We are Starling. We started by building a new kind of bank because we knew technology had the power to transform how people save, spend, and manage their money. Today, our ambition and our footprint have grown.
Our ecosystem encompasses our pioneering, fully licensed UK bank (Starling), our global Software-as-a-Service technology platform (Engine by Starling), alongside a growing portfolio of specialist financial and software businesses.
While our roots are in the UK, our operations are expanding globally. Though you may be based in one of our international offices (such as Sydney or Toronto), this role is critical to the entire Starling Group. The work you do will support, empower, and protect our businesses worldwide.
Our technologists are at the very heart of Starling and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and leveraging disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to enable you to make decisions regardless of your location or primary responsibilities; innovation and collaboration will be at the core of everything you do. Help is never far away in our open, borderless culture - you will find support in your team and from across the global business. We are in this together!
The way to thrive and shine within Starling is to be a self-driven individual and take full ownership of everything around you: from building, discovering, and solving complex problems, to sharing knowledge with your international colleagues to ensure all processes are efficient and productive. Our purpose across all our businesses is underpinned by five Starling values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.
Hybrid Working
We have a Hybrid approach to working here at Starling - our preference is that you're located within a commutable distance of place of work in Sydney, so that we're able to interact and collaborate in person.
About the Role
To support our growth, we are looking for an experienced SOC Team Lead with Incident Response experience to join our growing cyber security function. This role will be supporting our 24/7 operational capabilities by providing coverage in working hours from Sydney and Toronto alongside our UK colleagues.
As a member of the Starling Group’s SOC team, you will be working with the industry's brightest SecOps professionals to protect Starling Group’s customers, assets, and systems using the latest technologies.
- Lead a team of subject matter experts and analysts to ensure Information Security is managed and continuously improved in line with Bank policy and procedure.
- Supporting the development and progression of the Information Security Analyst team from both a technical and professional perspective.
- Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include:
- Cloud Infrastructure/Security.
- Endpoint Detection and Response.
- Perimeter detection tooling. - Conduct Quality Assurance for Triage case handling, mitigation actions and shift handover, collating lessons learned and implementing improvements where required.
- Interpret logs from a variety of sources (e.g. cloud, endpoint, network) to identify root cause and determine next steps for containment, eradication and recovery as part of incident response activities.
- Work together with other teams in the organisation to analyse, contain, eradicate and recover from cyber security incidents
- Continuous development and maintaining of incident handling, response and readiness processes.
- Support the wider SecOps team with detection engineering - creating and optimising analytic triggers to enhance alert efficacy - and threat hunting based on threat intelligence.
- Documentation of incidents and investigations, including analysis findings, containment steps and root cause.
- Plan and participate in Tabletop Exercises.
- Present investigation findings to technical and non-technical audiences.
Requirements
We’re open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Below is an overview:
- 5+ years experience in an in-house SOC role and team, including cyber incident response and digital forensics function.
- Experience in a similar role leading, developing and motivating a team of subject matter experts and other managers in Information and Cyber Security.
- Understanding of AWS Security Solutions (or other Public Cloud Solutions)
- Analysis and Incident Response experience with Cloud systems (GCP, AWS)
- Experience working and supporting analytics/SIEM platforms.
- Experience supporting and conducting Incident Response engagements.
- Experience in endpoint based investigations.
- Experience in cloud based investigations.
- Experience with Incident Command and conducting Tabletop Exercises.
- Experience in acting as both Commander and SME during incidents and investigations.
- Be a Self Starter with the ability to lead, inspire and drive change through an organisation.
- Excellent communication skills (both verbal and written), ability to communicate technical concepts to both technical and non-technical audiences.
- Demonstrated teamwork and collaboration skills as part of a multi-functional team
- Time management, problem-solving and interpersonal skills.
- Eagerness to learn and apply knowledge to new security challenges.
- Willingness to share knowledge with the team and mentor colleagues.
- A high level understanding of mobile, network and operating system security controls.
Preferred
- Experience in forensics: cloud (GCP, AWS); endpoint/server (Windows, MacOS, Linux); and/or network.
- Any experience of programming in Python, Go and/or Java.
- A Cyber/Information Security related degree and/or relevant cyber security qualification(s) would be desired but not required
- Understanding of malware analysis techniques
Interview Process
Interviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team:
- First Interview: 45 minutes
- Technical Interview: 90 minutes
- Final Interview: 30 minutes
Please Note
We require our successful candidates to pass background checks (including but not limited to employment references, fraud checks, financial probity, social media, and criminal history).
Starling welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.
Benefits
- 25 days holiday. You’ll also get your birthday on us
- The option to opt-out of public holidays
- The option to buy/sell up to 5 days of annual leave a year
- 16 hours paid volunteering time a year
- Enhanced Pat & Mat leave
- Perkbox
- Length of service increased annual leave
You may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway. We’re on a mission to radically reshape banking – and that starts with our brilliant team. Whatever came before, we’re proud to bring together people of all backgrounds and experiences who love working together to solve problems.
Starling is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.
When you provide us with this information, you are doing so at your own consent, with full knowledge that we will process this personal data in accordance with our Privacy Notice. By submitting your application, you agree that the Starling Group will collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we will process, where we will process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.
Join our teamWe’re on a mission to radically reshape banking – and that starts with our brilliant team. We know that our bank is only as good as the people who build it. From customer support and engineering to marketing and business development, we’re proud to bring together people of all backgrounds and experiences who love working together to solve problems.What to expectCreativity and collaborationWe’re growing fast – and no two days here at Starling are quite the same. We care about getting stuff done, not process, and our culture is decidedly entrepreneurial in spirit (you’ll be encouraged to pitch your ideas, however big or bold!). It’s a fast-paced, exciting and creative place to work where there’s plenty of collaboration and ownership of your own projects.Great techAs you’d expect from a technology company, we’ll make sure you have all the tools you need to get your job done – and that they’re the very best in the business. We work on MacBooks and you’ll receive anything else you might need on request.An open approachLots of companies talk about transparency – but it’s something we really care about. We communicate and collaborate through Slack, including a channel dedicated to updates from the leadership team.But wait... there’s moreIt’s important to us there’s more to life here than just work, so get to know your colleagues at socials, cheese & wine nights or learning lunches. Enjoy fresh fruit and coffee every day, free breakfasts and Perkbox, through which we offer the Cycle to Work scheme and salary-sacrificed gym memberships. We also offer private health insurance for all employees.We offer 33 days holiday (including public hols), plus an extra day on your birthday; you also get 16 hours of paid leave a year to do voluntary work.Ready to come on board?Browse our current openings below.
Join our team
We’re on a mission to radically reshape banking – and that starts with our brilliant team. We know that our bank is only as good as the people who build it. From customer support and engineering to marketing and business development, we’re proud to bring together people of all backgrounds and experiences who love working together to solve problems.
What to expect
Creativity and collaboration
We’re growing fast – and no two days here at Starling are quite the same. We care about getting stuff done, not process, and our culture is decidedly entrepreneurial in spirit (you’ll be encouraged to pitch your ideas, however big or bold!). It’s a fast-paced, exciting and creative place to work where there’s plenty of collaboration and ownership of your own projects.
Great tech
As you’d expect from a technology company, we’ll make sure you have all the tools you need to get your job done – and that they’re the very best in the business. We work on MacBooks and you’ll receive anything else you might need on request.
An open approach
Lots of companies talk about transparency – but it’s something we really care about. We communicate and collaborate through Slack, including a channel dedicated to updates from the leadership team.
But wait... there’s more
It’s important to us there’s more to life here than just work, so get to know your colleagues at socials, cheese & wine nights or learning lunches. Enjoy fresh fruit and coffee every day, free breakfasts and Perkbox, through which we offer the Cycle to Work scheme and salary-sacrificed gym memberships. We also offer private health insurance for all employees.
We offer 33 days holiday (including public hols), plus an extra day on your birthday; you also get 16 hours of paid leave a year to do voluntary work.
Ready to come on board?
Browse our current openings below.
