Engineer, Threat Detection - 5

• Join the Threat Detection & Response area of Tide’s Security Engineering team. • Protect the company by building a robust detection and automation platform. • Stay proactive in defence, constantly hacking Tide to improve its security posture and stay ahead of emerging threats. • Work towards making Tide resilient against an ever-evolving threat landscape. • Collaborate closely with the Product Security and Identity areas, sharing a Slack channel and running standups together as one team. • Support the development and implementation of a strategic vision for threat detection, driving direction and priorities for a team of talented engineers. • Run with an anything is possible mantra when building security automations. • Work flexibly from home or the office, with offices acting as hubs for collaboration.

• Bring strong knowledge of one of Splunk, Scanner, Sentinel, or SecOps. • Bring a strong understanding of modern attack and defence techniques across cloud environments including AWS and GCP. • Know SaaS environments such as Google Workspace and Okta, and desktop environments across Windows and macOS. • Bring strong experience in security automation, from writing scripts to creating end-to-end automated workflows. • Bring familiarity with SOAR platforms and automating threat detection and response tasks. • Bring a hands-on attitude and drive solutions through to completion. • Communicate excellently in writing and in person. • Bring a passion for passing knowledge on to colleagues. • Support the wider security incident response on-call rota.

• Bring a public repository showcasing your automation and scripting work. • Bring experience creating custom log parsers for in-house applications. • Bring experience tuning detections to reduce false positives. • Bring experience with test driven development applied to detection engineering. • Bring experience leading complex incident investigations across multiple teams. • Bring threat hunting experience using threat intelligence.

• Get hands-on with SIEM systems, creating custom log parsers, configuring alert rules, performing log analysis, and tuning detections. • Create security automations and services that remove mundane work, from data enrichment through to pulling phishing emails out of employee mailboxes. • Hunt continuously for sophisticated threats across the infrastructure, using threat intelligence and innovative detection techniques. • Monitor and respond to threats across AWS, GCP, internal applications, and employee endpoints on Windows and macOS. • Collaborate with cross-functional teams to develop and implement business-specific threat detection rules. • Ensure the quality of detections and the uptime of the detection ecosystem through test driven development and proactive health monitoring. • Identify opportunities to build or enhance internal tools that streamline detection, improve data visibility, and speed up response. • Lead complex incident investigations, coordinating security, IT, and engineering teams through containment, remediation, and recovery.

• Earn a competitive salary alongside share options. • Take generous annual leave on top of bank holidays. • Take paid maternity, paternity, and adoption leave. • Take extended unpaid and paid sabbatical options after milestone years with Tide. • Access salary sacrifice benefits including a nursery scheme that can save up to 47% on fees, plus Cycle to Work discounts. • Access comprehensive private family health insurance, life and accident cover, and a pension scheme. • Use therapy sessions, courses, meditations, and workshops for mental wellbeing. • Take paid volunteering and development days each year, with an annual learning budget for books, courses, and coaching. • Work from abroad for up to 90 days annually under the Work Outside the Office policy. • Claim a home office setup contribution and keep your old laptop when it is replaced.

Tide helps SMEs save time and money running their businesses, offering business accounts and banking services alongside connected administrative solutions from invoicing to accounting. It supports over 2 million members across the UK, India, Germany, and France, has raised over $300 million in funding, and employs more than 2,800 people globally, with Great Place to Work certification three years running. Its Security Engineering function spans Product Security, Identity, and Threat Detection & Response, three areas that collaborate closely enough to share a Slack channel and run standups together.