Principal Product Security Engineer

A BOUT TIDE At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting. Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France. Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love. Tide facts: Tide is available for UK, Indian, German and French SMEs Over 2 million members across UK and India Over $300 million raised in funding Over 2,800 Tideans globally Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026 We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg ABOUT THE TEAM: The Tide Security Engineering team is made up of three core areas: Product Security, Threat Detection & Response, and Identity. Product Security (this role!) consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up. Threat Detection & Response focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape. Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi-factor authentication, and granular role-based access controls to safeguard our internal operations. While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions. ABOUT THE ROLE: As a Senior Product Security Engineer you’ll: Regularly dive deep into mobile, web app technologies in order to understand feature development and proactively hunt for vulnerabilities Be proficient in securing cloud-native applications, ensuring that security best practices are applied consistently across our cloud environment Be proficient in threat modelling and guide developers in secure design principles to prevent vulnerabilities from being introduced in the first place Help remediate vulnerabilities through strategic initiatives, writing patches, or creating understandable and actionable vulnerability tickets. Be the subject matter expert across a wide range of security areas, particularly in Application Security. Make security invisible when possible, believing that gatekeeping and blocking product teams should be avoided in favour of enabling secure development. Mentor and coach junior engineers, sharing your knowledge to help raise the security bar across the organisation Leverage automation and security tools to seamlessly integrate security into our CI/CD pipelines, ensuring vulnerabilities are caught early without disrupting development. WHAT WE ARE LOOKING FOR: First and foremost you will be passionate about security and resilient software development processes. You will enjoy hunting for vulnerabilities