Engineer, Threat Detection - 5

Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Responsibilities

Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers; Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives; Creating security automations and services to automate mundane tasks; Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers; Collaborating with cross-functional teams to develop and implement business-specific threat detection rules; Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test driven development paired with proactive health monitoring capabilities; Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency; Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery; Support as part of the wider security incident response on-call rota

Requirements

Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps; Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments; Passion for passing on knowledge to fellow colleagues; Hands-on attitude and the ability to drive solutions to completion; Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks; Excellent spoken and written communication skills; Experience with writing automation and scripts

Nice to have

Bonus points if you have a repository to showcase your work

Benefits

Competitive Compensation - competitive salary and share options; Time Off – Generous annual leave on top of bank holidays; Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey; Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide; Access to salary sacrifice benefits – like Nursery and Cycle to Work discounts; Health Insurance – Comprehensive Private family insurance plan; Life & Accident Cover – Comprehensive accidental and life insurance protection; Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops; Retirement Planning – Build your retirement fund faster with Tide’s pension scheme on eligible earnings; Volunteering & Development Days – Paid days annually for volunteering or personal growth; Learning & Development – Annual budget for books, courses, coaching, and more; WOO (Work Outside the Office) – Work from abroad for up to 90 days annually; Home Office Setup – Contribution towards setting up your home office; Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement; Snacks & Meals – Daily breakfast spread with all-day coffee, tea, and juices