SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Tide is a fintech platform serving over 2 million SMEs globally with business banking and administrative solutions including invoicing and accounting. The Product Security team embeds security across the product surface, and the Remediation Operations function manages Tide's vulnerability management programme.
As a Remediation Operations Manager, you will lead the day-to-day execution of vulnerability management, acting as the connective tissue between security tooling and engineering/IT teams. Key responsibilities include:
• Triage and validate vulnerabilities from Tide's security tooling (Wiz, Semgrep, CrowdStrike Exposure Management, EASM platforms), separating signal from noise and confirming real, exploitable findings.
• Support risk-based prioritization by ranking findings by severity, exploitability, asset criticality and business context to focus engineering effort on what matters most.
• Automate remediation workflows within Tide's vulnerability management platform (Seemplicity), building routing, ticketing, deduplication and escalation logic.
• Verify and validate fixes through targeted re-scanning or manual checks to ensure risks are genuinely mitigated before closure.
• Partner with engineering and IT teams as a trusted advisor, explaining findings, advising on practical fixes, and helping teams understand the reasoning behind requests.
• Build reports and dashboards providing visibility of vulnerability posture, remediation progress, SLA adherence and trends for technical and senior stakeholders.
• Design and execute nudging strategies to shift fix behaviours across teams, using data and incentives to drive down time-to-remediate.
• Maintain pipeline health by monitoring ageing findings, chasing stalled items, identifying systemic blockers and feeding insights into vulnerability management strategy.
• Contribute to continuous improvement of remediation operations, refining processes, SLAs, taxonomies and tooling configuration.
You should have hands-on experience in vulnerability management or similar analytical security roles in fast-moving, cloud-native environments. Familiarity with vulnerability tooling (Wiz, Semgrep, CrowdStrike, EASM) and understanding of vulnerability scoring concepts (CVSS, EPSS, CISA KEV) is essential. Strong judgment in risk assessment and the ability to facilitate risk acceptance discussions are required.
