SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Tide is a fintech platform serving over 2 million SMEs globally with business banking and administrative solutions including invoicing and accounting. The company operates across the UK, India, Germany, and France with 2,800+ employees and has raised over $300 million in funding.
The Remediation Operations Manager role sits within the Product Security team, which is responsible for embedding security across Tide's product surface. This position owns the day-to-day operations of Tide's vulnerability management program, acting as the connective tissue between security tooling and engineering/IT teams.
Key responsibilities include:
• Triaging and validating vulnerabilities from security tools (Wiz, Semgrep, CrowdStrike Exposure Management, EASM platforms) to separate signal from noise and confirm real, exploitable findings
• Supporting risk-based prioritization by ranking findings using CVSS, EPSS, CISA KEV exploitability, and asset criticality to focus engineering effort on what matters most
• Automating remediation workflows within Seemplicity (vulnerability management platform), building routing, ticketing, deduplication, and escalation logic
• Verifying and validating fixes through re-scanning and manual checks to ensure risks are genuinely mitigated
• Partnering with engineering and IT teams as a trusted advisor, explaining findings, recommending practical fixes, and building understanding rather than treating security as compliance theater
• Building reports and dashboards showing vulnerability posture, remediation progress, SLA adherence, and trends for technical and executive stakeholders
• Designing and executing nudging strategies to improve fix behaviors and reduce time-to-remediate across teams
• Maintaining pipeline health by monitoring aging findings, chasing stalled items, and identifying systemic blockers
• Contributing to continuous improvement of remediation operations, refining processes, SLAs, taxonomies, and tooling
The ideal candidate has hands-on vulnerability management or analytical security experience in fast-moving, cloud-native environments. Familiarity with Wiz, Semgrep, CrowdStrike, EASM platforms, or comparable scanners is expected, along with solid understanding of vulnerability scoring, prioritization concepts, and judgment to sense-check severity ratings.
