Lead Platform Security Engineer

Who are Tide:

At Tide, we’re on a mission to save businesses time and money. We’re the leading provider of UK SME business accounts and one of the fastest-growing FinTechs in the UK. Using the latest tech, we design solutions with SMEs in mind and our member-driven financial platform is  transforming the business banking market. Not only do we offer our members business accounts and related banking services, but also a comprehensive set of highly connected admin tools for businesses. 

Tide is about doing what you love. We’re looking for someone to join us on our exciting scale up journey and be a part of something special. We are wanting passionate Tideans to drive innovation and help build a best-in-class platform to support our members. You will be comfortable in ambiguous situations and will be able to navigate the evolving FinTech environment. Imagine shaping how millions of Tide members discover and engage with business banking platforms and building this on a global scale.

What we’re looking for:

You’ll be an expert in all things AWS. You will be intimately familiar with services like CloudTrail, GuardDuty and SecurityHub. You will know what security best practice looks like across the commonly used AWS services such as S3 and RDS and get a real kick out of sharing your knowledge with other engineers.

As a Platform Security Engineer at Tide you will be working in the second line within a three lines of defence model. You will be responsible for proactively setting security measures and upgrades across the platform, identifying any gaps and improvements, and ensuring compliance with principles such as least privilege. You will be working closely with the first line engineering team and as part of your responsibility, you will educate, mentor and guide them on approaches, techniques and tooling for security in the cloud.

You will also understand concepts such as infrastructure as code (IaC) and ways it can be used to make building infrastructure secure and repeatable. You will be responsible for reviewing the IaC code created by our cloud engineering team and for providing feedback on ways it can be improved, clearly articulating your reasoning.

You are keen to expand your knowledge into other areas of Product Security.

As a Platform Security Engineer you’ll be:

• Designing next generation cloud infrastructure to ensure it is kept up do date without reliance manual processes like patching
• Defining and embedding security best practice and standards into our cloud engineering teams
• Building guardrails and defining policy around IAM to ensure least privilege is enacted
• Identifying ways to make sure new security misconfigurations are not created via IaC
• Hardening our existing cloud infrastructure
• Reviewing cloud integrations between Tide and any third parties and be a point of contact for any cloud security incidents

What makes you a great fit: 

• You have 6+ years of experience into could/ Platform security 
• You have spent some time in a DevOps / Cloud Engineering / SRE role and can understand what it means to have to keep things running 24 / 7
• You have the ability to take challenges and opportunities presented by a 100% containerized environment
• You have experience to review and write code in Python or another similar language
• You have experience to review and write Terraform
• You have understanding of concepts like Zero Trust networking
• You have experience in securing AWS MSK or Kafka clusters
• You have experience with HashiCorp Consul
• You have experience in understanding of monitoring and analytics and how that can play a part in Security Incident and Event Management
• You have any experience in Threat Modelling
• You have the ability to drive solutions to completion

What you’ll get in return: 

Make work, work for you! We are embracing new ways of working and support flexible working arrangements. With our Working Out of Office (WOO) policy our colleagues can work remotely from home or anywhere in their assigned Indian state. Additionally, you can work from a different country or Indian state for 90 days of the year. Plus, you’ll get:

• Competitive salary
• Self & Family Health Insurance
• Term & Life Insurance
• OPD Benefits
• Mental wellbeing through Plumm
• Learning & Development Budget
• WFH Setup allowance
• 15 days of Privilege leaves
• 12 days of Casual leaves
• 12 days of Sick leaves
• 3 paid days off for volunteering or L&D activities

Tidean Ways of Working 

At Tide, we’re Member First and Data Driven, but above all, we’re One Team. Our Working Out of Office (WOO) policy allows you to work from anywhere in the world for up to 90 days a year. We are remote first, but when you do want to meet new people, collaborate with your team or simply hang out with your colleagues, our offices are always available and equipped to the highest standard. We offer flexible working hours and trust our employees to do their work well, at times that suit them and their team.

Tide is a place for everyone

At Tide, we believe that we can only succeed if we let our differences enrich our culture. Our Tideans come from a variety of backgrounds and experience levels. We consider everyone irrespective of their ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity status or disability status. We believe it’s what makes us awesome at solving problems! We are One Team and foster a transparent and inclusive environment, where everyone’s voice is heard.

#LI-NN1 #LI-Remote