Security Operations Engineer, Engine by Starling
SOC, Engine by Starling
1+ day a week in office
Digital banking platform
Posted today
Digital banking platform
201-500 employees
Posted today
1+ day a week in office
201-500 employees
Company mission
To radically reshape banking in markets around the world – sharing the best-in-class digital banking platform we’ve built.
Role
Who you are
- 3+ years of experience in a SOC or SecOps Engineering role, with a strong background in both alert triage and security engineering
- Proficiency in Python: Ability to write clean code to automate workflows or interact with security APIs
- Cloud Fluency: Experience with security monitoring and incident response in cloud environments (AWS/GCP/Azure)
- Infrastructure as Code: Familiarity with managing security configurations through Git-based workflows
- Framework Knowledge: Strong understanding of attack vectors and the MITRE ATT&CK framework
- Education: A degree in a cyber-related field or relevant certifications (e.g., CompTIA Security+, CySA+, GCIH) is beneficial
- You may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway
What the job involves
- To support our rapid growth, we are looking for talented engineers to join our foundational in-house SecOps team
- This is a "Full-Stack" security role: you will move beyond traditional monitoring to develop and operate our security capabilities
- We are looking for engineers who are masters of automation but remain grounded in analyst fundamentals
- You should have a keen interest in leveraging AI and Large Language Models (LLMs) to reduce SOC toil - using AI to summarise complex alerts, auto-generate YARA-L detections, or build intelligent playbooks to stay ahead of modern threats
- Security Monitoring & Alert Triage:
- Active Monitoring: Monitor security alerts and events generated by the SecOps platform and integrated cloud security tools
- Triage & Analysis: Perform deep-dive analysis of security incidents and anomalies, accurately distinguishing between true positives and false positives
- Prioritisation: Manage the incident queue, prioritising alerts based on severity, potential impact, and business criticality
- Detection Engineering & Automation (IaC):
- Detection as Code: Design and maintain sophisticated detection logic using YARA-L. Manage the lifecycle of these rules and configurations using IaC principles for version control
- SOAR Extension: Lead the automation of response playbooks. You will write and extend SOAR capabilities using Python, creating custom integrations and "Managers" to connect SecOps with internal APIs
- Tool Optimisation: Identify opportunities for automation to streamline operations and contribute to the continuous tuning and maintenance of SOC tools
- Incident Response & Investigation:
- End-to-End Investigation: Investigate incidents thoroughly, leveraging logs from platforms, endpoints, and applications mapped to the Unified Data Model (UDM)
- Incident Lifecycle: Lead containment, eradication, and recovery efforts in collaboration with Security and Technology teams
- Documentation: Maintain comprehensive records of incident details, findings, and remediation steps to ensure a high standard of auditability
- Collaboration & Threat Intelligence:
- Group Collaboration: Work closely with the Group SOC team to align on global security standards and coordinate response efforts during cross-entity incidents
- Threat Hunting: Stay informed about the latest cyber threats and cloud-specific vulnerabilities, conducting proactive threat-hunting activities using available telemetry
Application process
- Interviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team:
- Stage 1 - 45 mins technical intereview
- Stage 2 - Take home task
- Stage 3 - 60 min with Team Members
- Stage 4 - Final with CTO
Our take
Engine by Starling emerges as a solution to the age-old challenge plaguing traditional banking systems: outdated infrastructure. The banking landscape is littered with legacy systems, hindering innovation, agility, and customer-centricity. Engine steps in to disrupt this by offering a cloud-native banking platform.
Firstly, it provides a suite of technology that forms the backbone of digital banking, enabling clients to pick solutions tailored to their needs. Secondly, Engine adopts a Software as a Service (SaaS) model, diverging from conventional banking strategies. This move democratises access to cutting-edge banking technology, cutting through geographical barriers and fostering global financial inclusivity.
Engine's trajectory is poised for expansion and dominance in the financial technology arena, with the CEO claiming it can be bigger than Starling. As it continues to catalyse digital transformation across traditional banking institutions, Engine is set to become a pivotal player in the industry.
Freddie
Company Specialist at Welcome to the Jungle
Insights
74% employee growth in 12 months
Company
Company benefits
- 🏖️ 33 holiday days: Including public holidays which you can take when works for you
- 👨👩👦 Generous family-friendly policies
- 🏥 Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner Benefits include discount with Waitrose, Mr&Mrs Smith and Peleton
- 🚗 Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing
- 🎗️ 16 hours paid volunteering time a year
- 👵🏽 Salary sacrifice, company enhanced pension scheme (10%)
- 🛟 4x life insurance: Life insurance at 4x your salary & group income protection
- 😋 Perkbox membership, giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
- 🎂 An extra day’s holiday for your birthday
- 🌍 Work from anywhere policy
Company values
- 👂 Listen: We listen to each other and our clients – because everyone has something different to teach us, and diversity of thought makes our work better.
- 👑 Aim for greatness: In everything we do, we strive to deliver the best possible outcome. If something’s worth making, it’s worth making it great
- 💪 Own it: Smart people thrive when they’re given freedom. Our people like to get their hands dirty, figure things out and take ownership
- ⚖️ Keep it simple: There’s beauty (and speed) in simplicity. From the way we speak to the tech we build, we want to be simple and clear in everything we do
- ⚖️ Do the right thing: Ethics aren’t an afterthought – they’re our driving force. Doing what’s best for our communities and the planet is central to our mission
Company HQ
Bishopsgate
Articles
Leadership
Sam Everington
(CEO)Has worked at Starling for the past 7 years in various roles before becoming the CEO of Engine by Starling in 2022. Previously a Senior Consultant/Manager & Technical Architect at Alfa.
Tom Beresford
(Chief Technology Officer)Tom leads Engine’s technical and engineering team. Before Engine Tom helped build Starling’s engineering team, the bank’s transaction systems, payment integrations and the cloud native banking platform
Mariam Ogunbambi
(Chief Client Officer)Mariam leads the management and support of Engine’s clients. Previously, she delivered integrations to launch Apple Pay in Starling and Current Account Switch as well as leading the Card Payments Team
Araminta Russell
(Chief Delivery Officer)Araminta shapes our solution design and leads our implementation teams. Before this she led Starling’s delivery of strategic technology programmes such as cheque imaging, 3D secure and cash deposits.
People progressing
Having joined Starling in 2018 as a Senior Engineer, Tom progressed to run the Lending team at Starling before making the move to Engine as a Principal Engineer and is now an Engineering Director.
Mariam leads the management and support of Engine’s clients. Previously, she delivered integrations to launch Apple Pay in Starling and Current Account Switch as well as leading the Card Payments Team
Diversity, Equity & Inclusion at Engine by Starling
Jake Pedlingham (Senior Talent Parter)
- We write job descriptions as inclusively as we can to ensure that no one from any group feels excluded; all are welcome to apply to Engine!
- We work closely with Women in Tech to help with our Gender Diversity: https://www.womenintech.co.uk/employers-hiring/starling-bank/
- We work with Diversifying group to ensure that all areas of diversity feel like they can apply to come and work at Engine: https://www.diversifying.io/employers/3736457-engine-by-starling
- We have partnered with Code First Girls as both Starling and Engine by Starling, welcoming over 20 career-switching women to the team over the past 4 years https://www.starlingbank.com/blog/code-first-girls-how-to-kick-start-your-career-in-tech/
- We partner with other groups such as Empower (Women In Tech), FutureCodeHers, HuddleHive where we host or sponsor events and meet ups
- Internally, we have an employee network called Always Open, made up of 5 groups, Bend the Bank (LGBTQ+), Embrace (Race and Ethnicity), Mental Health Positive (Mental Health), United Abilities (Disability) and With Women (Women)
- https://www.starlingbank.com/about/ethics-statement/
Share this job
View 12 more jobs at Engine by Starling