Threat Detection Engineer - Security Automation & Response

Tide; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Health Insurance

Life & Accident Cover

Mental Wellbeing

Generous annual leave

Parental Leave

Sabbatical

Salary sacrifice benefits (Nursery, Cy

Cycle to Work

Job summary

Tide is seeking a Security Engineer within the Threat Detection & Response group to protect the company by building a robust detection and automation platform. You will stay ahead of threats across AWS, GCP, internal apps and employee endpoints, while collaborating with teams to implement pervasive threat detection rules.

You’ll lead incident investigations, drive detections quality, and contribute to a flexible, inclusive workplace with strong learning opportunities and benefits.

Qualifications

• Strong knowledge of modern attack and defence techniques for Cloud (AWS, GCP), SaaS and desktop environments.
• Hands-on attitude with ability to drive solutions to completion.
• Experience in security automation, scripting and end-to-end automated workflows (SOAR).
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; show-case repository is a plus.

Responsibilities

• Lead complex incident investigations coordinating across security, IT, and engineering teams.
• Monitor and respond to threats across AWS, GCP, internal apps and endpoints.
• Create security automations to streamline threat detection and response tasks.
• Develop and tune detections with log parsing, alert rules and reducing false positives.
• Collaborate with cross-functional teams to implement threat detection rules and ensure uptime of detections ecosystem.

Skills

Splunk

Cloud security

Security automation

Scripting

SOAR

Incident response

Communication

Tools

SIEM

Okta

Google Workspace

Windows

macOS

Job description

Tide is seeking a Security Engineer within the Threat Detection & Response group to protect the company by building a robust detection and automation platform. You will stay ahead of threats across AWS, GCP, internal apps and employee endpoints, while collaborating with teams to implement pervasive threat detection rules.

You’ll lead incident investigations, drive detections quality, and contribute to a flexible, inclusive workplace with strong learning opportunities and benefits.