Engineer, Threat Detection - 5

Careers at Tide; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Competitive pay

Annual leave

Parental leave

Sabbatical

Salary sacrifice benefits

Health insurance

Life & accident cover

Mental wellbeing

Retirement planning

Volunteer days

Learning budget

Work from abroad

Home office setup

Laptop provided

Snacks & meals

Job summary

Tide is building security across a dynamic fintech that serves SMEs worldwide. This Threat Detection & Response role focuses on proactive defense, building robust detection, and automating response across AWS, GCP, and on‑premise apps.

Join a collaborative team to lead incident investigations, develop detections, and improve internal tools while enjoying a flexible hybrid work model and strong learning opportunities.

Qualifications

• Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps.
• Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show-case your work.

Responsibilities

• Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.
• Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.
• Creating security automations and services to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers.
• Collaborating with cross-functional teams to develop and implement; business-specific threat detection rules.
• Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test-driven development paired with proactive health monitoring capabilities.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.
• Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.
• Support as part of the wider security incident response on-call rota.

Skills

Splunk

Scanner

Sentinel

SecOps

Cloud security (AWS, GCP)

Windows/macOS security

Job description

At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting.

Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France.

Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love.

• Tide is available for UK, Indian, German and French SMEs
• Over 2 million members: 900,000 UK and 1,100,000 in India and growing rapidly
• Over $300 million raised in funding
• Over 2,800 Tideans globally
• Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026
• We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg

ABOUT THE ROLE:

The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever‑evolving threat landscape.

Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi‑factor authentication, and granular role‑based access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

• Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.
• Getting hands‑on with SIEM systems, including creating custom log‑parsers for in‑house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.
• Creating security automations and services to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes. We want you to run with the “anything is possible” mantra.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers. You'll monitor and respond to threats across AWS, GCP, internal applications, and employee endpoints (Windows, macOS).
• Collaborating with cross‑functional teams to develop and implement; business‑specific threat detection rules.
• Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test‑driven development paired with proactive health monitoring capabilities.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.
• Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.
• Support as part of the wider security incident response on‑call rota.

WHAT WE ARE LOOKING FOR:

• Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps.
• Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands‑on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end‑to‑end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show‑case your work.

WHAT YOU’LL GET IN RETURN:

• Competitive Compensation - competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Access to salary sacrifice benefits – like Nursery (could save up to 47% on fees!) and Cycle to Work discounts
• Health Insurance – Comprehensive Private family insurance plan.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Retierment Planning – Build your retirement fund faster with Tide’s pension scheme on eligible earnings.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Daily breakfast spread with all‑day coffee, tea, and juices..

TIDEAN WAYS OF WORKING:

At Tide, we champion a flexible workplace model thatsupports both in‑person and remote work to cater to the specific needs of our different teams.

While remote work is supported, we believe in the power of face‑to‑face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team‑building, where we encourage regular in‑person gatherings to foster a strong sense of community.

TIDE IS A PLACE FOR EVERYONE

At Tide, we thrive on diversity, embracing various backgrounds and experiences. We welcome all individuals regardless of ethnicity, religion, sexual orientation, gender identity, or disability. Our inclusive culture is key to our success, helping us build products that meet our members' diverse needs. We are One Team, committed to transparency and ensuring everyone’s voice is heard.