Principal Product Security Engineer
Tide is a UK-founded fintech business financial platform providing banking and financial-management services to small businesses and sole traders.
About Tide
Tide Platform Limited operates Tide, offering business accounts, payments, accounting and tax tools, savings, payroll, and business finance. Tide is FCA-authorised for electronic-money and payment services and is not itself a bank; its business bank accounts are provided through partner banks including ClearBank.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will assess web and mobile applications for vulnerabilities, conduct threat modelling, guide secure design, and remediate issues through patches and actionable tickets. You will embed security automation into CI/CD pipelines, secure cloud-native applications, communicate risks clearly, and mentor junior engineers.
Requirements
- Application security expertise
- Cloud-native application security
- Threat modelling
- Secure design
- Burp Suite or an attack proxy
- Proof-of-concept scripting
- Written and spoken communication
- Web and mobile application security
- CI/CD security automation
Responsibilities
- Investigate web and mobile technologies for vulnerabilities
- Secure cloud-native applications
- Conduct threat modelling and guide secure design
- Remediate vulnerabilities through initiatives, patches, and actionable tickets
- Advise on application security
- Mentor and coach junior engineers
- Integrate security automation into CI/CD pipelines
Benefits
- Group Life Insurance
- Vitality Health Insurance
- 24/7 Employee Assistance Programme
- 25 days holiday with the ability to buy extra days
- £1,000 professional L&D budget per year
- Cycle to Work scheme
- Pension contribution
- All-day snacks bar
- Enhanced family-friendly leave
- 3 days for L&D or volunteering time off per year
- Flexible working options
- Sabbatical leave
- Share options