28 days ago
Remote, United KingdomStaff+
Responsibilities
- Investigate web and mobile applications to understand feature development and proactively identify vulnerabilities.
- Secure cloud-native applications and promote consistent security best practices across the cloud environment.
- Perform threat modeling and guide developers on secure design principles.
- Help remediate vulnerabilities by writing patches or creating clear, actionable vulnerability tickets.
- Serve as a subject matter expert in application security and related security domains.
- Use automation and security tools to integrate security into CI/CD pipelines.
- Create proof-of-concept scripts to demonstrate security findings and their potential impact.
- Mentor and coach junior engineers and communicate security issues to engineers, product owners, VPs, and executives.
Requirements
- Deep and broad knowledge of application security, including mobile, web, and cloud-native security concepts.
- Experience with topics including Secure Enclave, URL Schemes, Universal Links, presigned URLs in Amazon S3, and secure browser storage mechanisms.
- Strong hands-on knowledge of Burp Suite or another attack proxy; experience contributing a Burp Suite extension is a bonus.
- Hands-on experience securing cloud-native applications.
- Ability to explain vulnerabilities clearly and persuasively and advocate for remediation.
- A blog, public speaking engagements, bug bounty profile, or Git repository demonstrating security work is preferred.
Benefits
- Competitive salary.
- Group Life Insurance and Vitality Health Insurance.
- 24/7 Employee Assistance Programme.
- 25 days of holiday with the option to buy additional days.
- £1,000 annual professional learning and development budget.
- Salary-sacrifice benefits including Cycle to Work and pension contribution schemes.
- Enhanced family-friendly leave.
- Three days per year for learning and development or volunteering time off.
- Flexible working options with support for remote work and regular in-person collaboration.
- Sabbatical leave and share options.
- Office in Liverpool Street with an all-day snacks bar.
About Tide
Tide builds a digital business banking platform for small and medium-sized enterprises, offering current accounts, cards, payments, credit options, and connected admin tools such as invoicing and accounting integrations. Headquartered in London and founded in 2015, it operates in the UK, India, Germany, and France as a privately held company. Its mobile and web apps aim to reduce back-office workload for SMEs by combining banking with day-to-day financial administration.