Threat Detection Engineer: SIEM & Automated Response

Careers at Tide; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Competitive pay

Annual leave

Parental leave

Sabbatical

Salary sacrifice benefits

Health insurance

Life & accident cover

Mental wellbeing

Retirement planning

Volunteer days

Learning budget

Work from abroad

Home office setup

Laptop provided

Snacks & meals

Job summary

Tide is building security across a dynamic fintech that serves SMEs worldwide. This Threat Detection & Response role focuses on proactive defense, building robust detection, and automating response across AWS, GCP, and on‑premise apps.

Join a collaborative team to lead incident investigations, develop detections, and improve internal tools while enjoying a flexible hybrid work model and strong learning opportunities.

Qualifications

• Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps.
• Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show-case your work.

Responsibilities

• Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.
• Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.
• Creating security automations and services to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers.
• Collaborating with cross-functional teams to develop and implement; business-specific threat detection rules.
• Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test-driven development paired with proactive health monitoring capabilities.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.
• Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.
• Support as part of the wider security incident response on-call rota.

Skills

Splunk

Scanner

Sentinel

SecOps

Cloud security (AWS, GCP)

Windows/macOS security

Job description

Tide is building security across a dynamic fintech that serves SMEs worldwide. This Threat Detection & Response role focuses on proactive defense, building robust detection, and automating response across AWS, GCP, and on‑premise apps.

Join a collaborative team to lead incident investigations, develop detections, and improve internal tools while enjoying a flexible hybrid work model and strong learning opportunities.