SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Tide is a fintech platform serving over 2 million SMEs globally across the UK, India, Germany, and France. The company offers business accounts, banking services, and administrative solutions including invoicing and accounting tools. Tide has raised over $300 million in funding and operates offices across Central London, Sofia, Belgrade, Bucharest, Vilnius, Hyderabad, Gurugram, New Delhi, Berlin, Paris, and Luxembourg.
The Security Engineering team comprises three core areas: Product Security, Threat Detection & Response, and Identity. The Product Security function consists of application and cloud security experts focused on protecting products through secure design reviews, threat modelling, and penetration testing.
As a Principal Product Security Engineer, you will lead the Product Security function with responsibility for:
- Conducting deep technical analysis of mobile and web application technologies to identify vulnerabilities proactively
- Ensuring cloud-native applications follow security best practices consistently across the cloud environment
- Developing and guiding threat modelling practices and secure design principles to prevent vulnerabilities at the design stage
- Remediating vulnerabilities through strategic initiatives, patch development, and creation of actionable vulnerability tickets
- Serving as a subject matter expert across application security and related domains
- Enabling secure development by making security invisible where possible, avoiding gatekeeping in favour of developer enablement
- Mentoring and coaching junior engineers to raise the security bar across the organization
- Integrating security automation and tools into CI/CD pipelines to catch vulnerabilities early without disrupting development workflows
You will work collaboratively with the broader Security Engineering team, sharing standups and communication channels to ensure alignment across Product Security, Threat Detection & Response, and Identity functions.
Tide offers flexible working options with a hybrid model supporting both in-person and remote work. The primary office is located in Liverpool Street, London, with a spacious brand-new facility and all-day snacks bar. The company emphasizes face-to-face collaboration for team-building and innovation.
Benefits include competitive salary, group life insurance, Vitality health insurance, 24/7 employee assistance programme, 25 days holiday (with ability to purchase additional days), £1,000 annual professional development budget, salary sacrifice benefits (Cycle to Work, pension), enhanced family-friendly leave, 3 days annual L&D or volunteering time off, flexible working, sabbatical leave, and share options.
REQUIREMENTS:
- Breadth and depth of knowledge across application security (AppSec), including understanding of secure key storage (Secure Enclave), mobile deep linking (URL Schemes vs Universal Links), cloud storage security (presigned URLs, S3), and browser storage mechanisms
- Expert proficiency with Burp Suite or equivalent attack proxy; bonus for custom extensions
- Excellent spoken and written communication skills to articulate vulnerabilities clearly and persuasively to engineers, product owners, VPs, and executives
- Demonstrated passion for security through public evidence: blog, public speaking engagements, bug bounty profile, or public Git repositories showcasing your work
- Ability to write proof-of-concept (POC) scripts to demonstrate findings and potential impact
- Hands-on experience securing cloud-native applications with consistent application of best practices
- Passion for security and resilient software development processes
- Keen awareness of infosec trends and ability to apply new industry tools and automations
