Senior Product Security Engineer

2 Months ago • All levels • Product Management

Job Summary

Job Description

The Senior Product Security Engineer will be passionate about security and resilient software development processes. They will hunt for vulnerabilities in web and mobile applications and work with engineering teams to fix them. They will explain security issues to various stakeholders and apply new industry trends and tools. Key responsibilities include diving deep into mobile and web app technologies, securing cloud-native applications, threat modeling, helping fix vulnerabilities, and mentoring junior engineers. They will also use automation and security tools for CI/CD pipelines. The Tide Security Engineering team focuses on Product Security, Threat Detection & Response, and Identity, ensuring collaboration and seamless communication across all security functions.
Must have:
  • Knowledge across AppSec
  • Proficiency in Burp Suite
  • Excellent communication skills
  • Experience securing cloud-native applications
  • Comfortable writing POC scripts
Perks:
  • 25 days paid annual leave
  • 3 paid days off for volunteering or L&D activities
  • Extended maternity and paternity leave
  • Personal L&D budget
  • Additional health & dental insurance
  • Mental wellbeing platform
  • Fully covered Multisports card
  • Food vouchers
  • Snacks, light food, drinks in the office
  • WFH equipment allowance
  • Flexible working from home
  • Sabbatical Leave
  • Share options

Job Details

ABOUT TIDE

At Tide, we are building a business management  platform designed to save small businesses time and money. We provide our members with business accounts and related banking services, but also a comprehensive set of connected administrative solutions from invoicing to accounting.


Launched in 2017, Tide is now used by over 1 million small businesses across the world and is available to UK, Indian and German SMEs. Headquartered in central London, with offices in Sofia, Hyderabad, Delhi, Berlin and Belgrade, Tide employs over 2,000 employees.


Tide is rapidly growing, expanding into new products and markets and always looking for passionate and driven people. Join us in our mission to empower small businesses and help them save time and money.

ABOUT THE TEAM

The Tide Security Engineering team is made up of three core areas: Product Security, Threat Detection & Response, and Identity.

Product Security (this role!) consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi-factor authentication, and granular role-based access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

ABOUT THE ROLE

First and foremost you will be passionate about security and resilient software development processes. You will enjoy hunting for vulnerabilities in our web and mobile applications and working with our engineering teams to remediate them strategically. You will be comfortable explaining security issues and concerns to product owners, engineers, VPs and executives and love the feeling you get when this results in them releasing a more resilient product. You will be a keen follower of all things Infosec and constantly be on the lookout for ways to apply new industry trends, tools and automations to your day-to-day role.

As a Senior Product Security Engineer you’ll:

  • Regularly dive deep into mobile, web app technologies in order to understand feature development and proactively hunt for vulnerabilities
  • Be proficient in securing cloud-native applications, ensuring that security best practices are applied consistently across our cloud environment
  • Be proficient in threat modelling and guide developers in secure design principles to prevent vulnerabilities from being introduced in the first place
  • Help remediate vulnerabilities through strategic initiatives, writing patches, or creating understandable and actionable vulnerability tickets.
  • Be the subject matter expert across a wide range of security areas, particularly in Application Security.
  • Make security invisible when possible, believing that gatekeeping and blocking product teams should be avoided in favour of enabling secure development.
  • Mentor and coach junior engineers, sharing your knowledge to help raise the security bar across the organisation
  • Leverage automation and security tools to seamlessly integrate security into our CI/CD pipelines, ensuring vulnerabilities are caught early without disrupting development.

WHAT WE ARE LOOKING FOR

  • You have a breadth and depth of knowledge across AppSec; you’re expected to understand topics like why private keys should be stored in the Secure Enclave, the differences between URL Schemes and Universal Links, what presigned URLs are in the context of S3 and the safest storage mechanisms for modern browsers.
  • You know Burp Suite (or your favourite attack proxy) inside and out; bonus points if you’ve written or contributed to an extension that enhances its functionality.
  • You have excellent spoken and written communication skills to articulate vulnerabilities clearly and persuasively, advocating for their remediation even when faced with competing production pressures.
  • As a passionate senior security engineer, you have a blog, public speaking engagements, bug bounty profile, or a Git repository showcasing your work.
  • You’re comfortable writing proof-of-concept (POC) scripts to demonstrate your findings and their potential impact, as needed.
  • You have hands-on experience with securing cloud-native applications, ensuring that best practices are consistently applied.

WHAT YOU WILL GET IN RETURN

  • 25 days paid annual leave 
  • 3 paid days off for volunteering or L&D activities
  • Extended maternity and paternity leave covered by the company
  • Personal L&D budget in the amount of 1000 BGN per year
  • Additional health & dental insurance
  • Mental wellbeing platform 
  • Fully covered Multisports card
  • Food vouchers
  • Snacks, light food, drinks in the office
  • WFH equipment allowance
  • Flexible working from home
  • Sabbatical Leave
  • Share options

TIDEAN WAYS OF WORKING

At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams. 

While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community.

#LI-CC1 #LI-Remote

TIDE IS A PLACE FOR EVERYONE

At Tide, we believe that we can only succeed if we let our differences enrich our culture. Our Tideans come from a variety of backgrounds and experience levels. We consider everyone irrespective of their ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or differently-abled status. We celebrate diversity in our workforce as a cornerstone of our success. Our commitment to a broad spectrum of ideas and backgrounds is what enables us to build products that resonate with our members’ diverse needs and lives. 

We are One Team and foster a transparent and inclusive environment, where everyone’s voice is heard.

 

At Tide, we thrive on diversity, embracing various backgrounds and experiences. We welcome all individuals regardless of ethnicity, religion, sexual orientation, gender identity, or disability. Our inclusive culture is key to our success, helping us build products that meet our members' diverse needs. We are One Team, committed to transparency and ensuring everyone’s voice is heard.

 

You personal data will be processed by Tide for recruitment purposes and in accordance with Tide's Recruitment Privacy Notice.

Similar Jobs

CyberArk - Solution Engineer, Strategic Accounts - East

CyberArk

United States (On-Site)
1 Month ago
Ion - Principal Software Engineer (React)

Ion

Mexico City, Mexico (Hybrid)
3 Months ago
binance - PR Lead - MENAP

binance

Dubai, Dubai, United Arab Emirates (Hybrid)
6 Months ago
arrowhead games - Chief Technical Officer

arrowhead games

Stockholm, Stockholm County, Sweden (Hybrid)
6 Months ago
Palo Alto Networks - Consulting Director, Cloud Security Operations, Proactive Services

Palo Alto Networks

Netherlands (Remote)
1 Month ago
Two Circles - Digital Content Producer

Two Circles

Melbourne, Victoria, Australia (Hybrid)
2 Months ago
lifechruh - Senior Product Manager

lifechruh

Edmond, Oklahoma, United States (On-Site)
3 Months ago
Tencent - Senior Product Manager

Tencent

Shenzhen, Guangdong Province, China (On-Site)
1 Month ago
Moloco - Group Product Manager

Moloco

Seoul, South Korea (On-Site)
2 Months ago
Bazaar Voice - Senior Product Marketing Manager

Bazaar Voice

Austin, Texas, United States (Hybrid)
2 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Ion - Lead UI Engineer (React)

Ion

New York, United States (On-Site)
5 Months ago
Bungie - Destiny 2 Global Franchise Director

Bungie

(Hybrid)
3 Months ago
Nintendo - Sr Product Experience Analyst (Bilingual Japanese)

Nintendo

Redmond, Washington, United States (Hybrid)
8 Months ago
Rackspace Technology - Senior Customer Success Manager

Rackspace Technology

San Antonio, Texas, United States (Hybrid)
2 Months ago
Palo Alto Networks - Consulting Director, Cloud Security Operations, Proactive Services

Palo Alto Networks

Netherlands (Remote)
1 Month ago
Electronic Arts - Project & People Manager

Electronic Arts

Bucharest, Bucharest, Romania (On-Site)
1 Month ago
Ion - Lead UI Developer, New York

Ion

New York, New York, United States (Hybrid)
9 Months ago
CyberArk - Solution Engineer, Strategic Accounts - East

CyberArk

United States (On-Site)
1 Month ago
Lirio - Regional Vice President Life Science Sales

Lirio

United States (Remote)
1 Month ago
arrowhead games - Chief Technical Officer

arrowhead games

Stockholm, Stockholm County, Sweden (Hybrid)
6 Months ago

Get notifed when new similar jobs are uploaded

Jobs in Sofia, Sofia City Province, Bulgaria

DraftKings - Scrum Master

DraftKings

Sofia, Sofia City Province, Bulgaria (Hybrid)
1 Month ago
Sega (UK) - Senior Environment Artist

Sega (UK)

Sofia, Sofia City Province, Bulgaria (Hybrid)
2 Months ago
Progress - Manager, Software Engineering

Progress

Sofia, Sofia City Province, Bulgaria (Hybrid)
1 Month ago
PwC - Senior Auditor for Work on International EU Funded Projects

PwC

Sofia, Sofia City Province, Bulgaria (On-Site)
9 Months ago
HCL Tech - Specialist

HCL Tech

Sofia, Sofia City Province, Bulgaria (Remote)
2 Months ago
Tide - Customer Support Specialist with German (Subscription plans)

Tide

Sofia, Sofia City Province, Bulgaria (Hybrid)
2 Months ago
DraftKings - Manager, System DBA Operations

DraftKings

Sofia, Sofia City Province, Bulgaria (On-Site)
8 Months ago
endava - .NET Developer with AWS experience

endava

Sofia, Sofia City Province, Bulgaria (On-Site)
1 Month ago
Tide - Sales Representative

Tide

Bulgaria (Hybrid)
2 Months ago
Maersk - Customer Experience Consultant

Maersk

Sofia, Sofia City Province, Bulgaria (Hybrid)
1 Month ago

Get notifed when new similar jobs are uploaded

Product Management Jobs

Epic Games - Senior Technical Producer

Epic Games

(On-Site)
4 Months ago
Interface AI - Principal Product Manager (Sphere)

Interface AI

San Francisco, California, United States (On-Site)
2 Months ago
Zynga - Producer, Ex Dev

Zynga

Austin, Texas, United States (On-Site)
2 Months ago
playrix  - Creatives Producer

playrix

Ukraine (Remote)
9 Months ago
Scale AI - Incubation Product Manager

Scale AI

San Francisco, California, United States (On-Site)
2 Months ago
warner bros games - Executive Producer

warner bros games

San Francisco, California, United States (Hybrid)
4 Months ago
Ello - Product Engineer (ML & Mobile)

Ello

San Francisco, California, United States (On-Site)
4 Months ago
Next Level Business Services - .Net with L2 Production Support Raleigh, NC

Next Level Business Services

Raleigh, North Carolina, United States (On-Site)
9 Months ago
hogarth - Content Production Manager

hogarth

Buenos Aires, Buenos Aires, Argentina (On-Site)
2 Months ago

Get notifed when new similar jobs are uploaded

About The Company

Tide is the leading provider of UK small business (SMEs) accounts and one of the fastest-growing fintechs in the UK. Tide is live in the UK and India with over 650,000 members in the UK and more than 350,000 in India.


Tide is transforming the small business banking market. Our platform not only offers business accounts and related banking services, but also a comprehensive set of highly connected admin tools for businesses, such as full integration with accounting systems (live for our UK members, many are live in India, and coming soon to Germany). Using advanced technology, all solutions are designed with SMEs in mind.


With quick onboarding, low fees and innovative features, we thrive on making data-driven decisions to help SMEs save both time and money.

Bulgaria (Hybrid)

Bengaluru, Karnataka, India (Remote)

Romania (Remote)

Berlin, Berlin, Germany (Hybrid)

Hyderabad, Telangana, India (Hybrid)

Delhi, India (Remote)

Hyderabad, Telangana, India (On-Site)

View All Jobs

Get notified when new jobs are added by Tide

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug