Security Operations Responder
Tide is a UK-founded fintech business financial platform providing banking and financial-management services to small businesses and sole traders.
About Tide
Tide Platform Limited operates Tide, offering business accounts, payments, accounting and tax tools, savings, payroll, and business finance. Tide is FCA-authorised for electronic-money and payment services and is not itself a bank; its business bank accounts are provided through partner banks including ClearBank.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will be on the front line of defence, triaging and investigating alerts across AWS, GCP, SaaS and endpoints, and leading response to complex incidents. You will build SOAR playbooks and automations, work with Detection Engineering to improve true and false positive efficacy, and write detections, hunt threats and build internal tools when the queue is clear.
Requirements
- Significant hands-on experience in security operations, incident response or threat investigation
- Log analysis skills and fluent querying of a SIEM or data lake (Splunk, Scanner, Sentinel or SecOps)
- Understanding of attack and defence techniques across Cloud, SaaS and desktop environments and MITRE ATT&CK
- Security automation experience including Python scripting
- Familiarity with SOAR platforms
- Experience writing or tuning detections
- Calm judgement during live incidents
- Excellent communication skills
Responsibilities
- Triage and investigate security alerts through the data lake and SOAR platform
- Drive investigations to well-evidenced outcomes and take containment and remediation actions
- Lead response to complex or high-severity incidents
- Document investigations and contribute to runbooks
- Build SOAR playbooks and security automations
- Turn repetitive work into automated workflows
- Close gaps in log sources, parsing and enrichment
- Feed outcomes back to Detection Engineering to tune detections
- Track investigation metrics such as MTTD and MTTR
- Write, test and ship detections as code
- Hunt proactively for threats
- Build internal tools
- Mentor team members
Benefits
- Generous annual leave on top of bank holidays
- Paid maternity, paternity and adoption leave
- Sabbatical
- Private family health insurance with OPD coverage
- Life and accident cover
- Mental wellbeing support
- Paid volunteering and development days
- Learning and development budget
- Work outside the office up to 90 days annually
- Home office setup contribution
- Laptop ownership
- Office snacks and meals
