Principal Product Security Engineer New United Kingdom

Tide; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Group Life Insurance

Vitality Health Insurance

24/7 Employee Assistance Programme

25 days holiday + buy extra days

£1,000 L&D budget

Salary sacrifice benefits (Cycle to We

Brand-new office in Liverpool Street

Family-friendly leave

L&D/volunteering time off

Flexible working options

Sabbatical leave

Share options

Job summary

Tide is seeking a Senior Product Security Engineer to join our Security Engineering team in London. You will dive into mobile and web technologies, secure cloud-native applications, and guide developers in secure design principles to prevent vulnerabilities.

You will help remediate findings and drive secure development across CI/CD, collaborating with product and engineering teams. Our role emphasizes mentoring, automation, and broad expertise in application security, with a flexible workplace

Qualifications

• Experience with Burp Suite or equivalent attack proxy.
• Proven ability to write or contribute to extensions for testing tools.
• Hands-on securing cloud-native apps and CI/CD pipelines.
• Strong threat modelling and secure design guidance for developers.
• Ability to create actionable vulnerability tickets and patches.

Responsibilities

• Dive into mobile and web app tech to hunt vulnerabilities.
• Secure cloud-native apps with consistent best practices.
• Guide developers in secure design principles to prevent issues.
• Remediate vulnerabilities through patches and tickets.
• Be SME across security areas, especially Application Security.
• Enable secure development by minimizing gatekeeping.
• Mentor junior engineers to raise security standards.
• Integrate security into CI/CD pipelines and automation.

Skills

Burp Suite

Attack proxies

Cloud security

Threat modelling

Secure design principles

POC scripts

CI/CD security

Tools

Burp Suite

Job description

At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting.

Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France.

Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love.

• Tide is available for UK, Indian, German and French SMEs
• Over 2 million members globally and rapidly growing
• Over $300 million raised in funding
• 3,000 Tideans globally
• Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026
• We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg

ABOUT THE TEAM:

The Tide Security Engineering team is made up of three core areas: Product Security, Threat Detection & Response, and Identity.

Product Security (this role!) consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever‑evolving threat landscape.

Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi‑factor authentication, and granular role‑based access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

ABOUT THE ROLE:

As a Senior Product Security Engineer you’ll:

• Regularly dive deep into mobile, web app technologies in order to understand feature development and proactively hunt for vulnerabilities
• Be proficient in securing cloud‑native applications, ensuring that security best practices are applied consistently across our cloud environment
• Be proficient in threat modelling and guide developers in secure design principles to prevent vulnerabilities from being introduced in the first place
• Help remediate vulnerabilities through strategic initiatives, writing patches, or creating understandable and actionable vulnerability tickets.
• Be the subject matter expert across a wide range of security areas, particularly in Application Security.
• Make security invisible when possible, believing that gatekeeping and blocking product teams should be avoided in favour of enabling secure development.
• Mentor and coach junior engineers, sharing your knowledge to help raise the security bar across the organisation
• Leverage automation and security tools to seamlessly integrate security into our CI/CD pipelines, ensuring vulnerabilities are caught early without disrupting development.

WHAT WE ARE LOOKING FOR:

First and foremost you will be passionate about security and resilient software development processes. You will enjoy hunting for vulnerabilities in our web and mobile applications and working with our engineering teams to remediate them strategically. You will be comfortable explaining security issues and concerns to product owners, engineers, VPs and executives and love the feeling you get when this results in them releasing a more resilient product. You will be a keen follower of all things Infosec and constantly be on the lookout for ways to apply new industry trends, tools and automations to your day-to-day role.

What makes you a great fit:

• You know Burp Suite (or your favourite attack proxy) inside and out; bonus points if you’ve written or contributed to an extension that enhances its functionality.
• You have excellent spoken and written communication skills to articulate vulnerabilities clearly and persuasively, advocating for their remediation even when faced with competing production pressures.
• As a passionate senior security engineer, you have a blog, public speaking engagements, bug bounty profile, or a Git repository showcasing your work.
• You’re comfortable writing proof‑of‑concept (POC) scripts to demonstrate your findings and their potential impact, as needed.
• You have hands‑on experience with securing cloud‑native applications, ensuring that best practices are consistently applied

WHAT YOU’LL GET IN RETURN:

• Group Life Insurance
• Vitality Health Insurance, with a proactive focus on mental and physical wellbeing
• 24/7 Employee Assistance Programme
• 25 days holiday with the ability to buy extra days
• We invest in your development with a £1,000 professional L&D budget per year
• Access to ‘salary sacrifice’ benefits such as Cycle to Work scheme and pension contribution
• Spacious brand-new office in Liverpool street with an all‑day snacks bar
• Enhanced family‑friendly leave
• 3 days for L&D or volunteering time off per year
• Flexible working options
• Sabbatical leave
• Share options

TIDEAN WAYS OF WORKING

At Tide, we champion a flexible workplace model thatsupports both in‑person and remote work to cater to the specific needs of our different teams.

While remote work is supported, we believe in the power of face‑to‑face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team‑building, where we encourage regular in‑person gatherings to foster a strong sense of community.

#LI-MP1

TIDE IS A PLACE FOR EVERYONE

At Tide, we believe that we can only succeed if we let our differences enrich our culture. Our Tideans come from a variety of backgrounds and experience levels. We consider everyone irrespective of their ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or differently‑abled status. We celebrate diversity in our workforce as a cornerstone of our success. Our commitment to a broad spectrum of ideas and backgrounds is what enables us to build products that resonate with our members’ diverse needs and lives.

We are One Team and foster a transparent and inclusive environment, where everyone’s voice is heard.

At Tide, we thrive on diversity, embracing various backgrounds and experiences. We welcome all individuals regardless of ethnicity, religion, sexual orientation, gender identity, or disability. Our inclusive culture is key to our success, helping us build products that meet our members' diverse needs. We are One Team, committed to transparency and ensuring everyone’s voice is heard.

Tide leverages AI to enhance our hiring experience. You can read more about how we use AI in our recruitment process in our AI Policy .