Principal Product Security Engineer

📋 Job Overview

At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting. Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France.

🏢 About Tide

Tide is available for UK, Indian, German and French SMEs. Over 2 million members globally and rapidly growing. Over $300 million raised in funding. 3,000 Tideans globally. Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026. We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg.

🎯 The Role

As a Senior Product Security Engineer you’ll regularly dive deep into mobile, web app technologies in order to understand feature development and proactively hunt for vulnerabilities. You’ll be proficient in securing cloud-native applications, ensuring that security best practices are applied consistently across our cloud environment. You’ll be proficient in threat modelling and guide developers in secure design principles to prevent vulnerabilities from being introduced in the first place. You’ll help remediate vulnerabilities through strategic initiatives, writing patches, or creating understandable and actionable vulnerability tickets. You’ll be the subject matter expert across a wide range of security areas, particularly in Application Security. You’ll make security invisible when possible, believing that gatekeeping and blocking product teams should be avoided in favour of enabling secure development. You’ll mentor and coach junior engineers, sharing your knowledge to help raise the security bar across the organisation. You’ll leverage automation and security tools to seamlessly integrate security into our CI/CD pipelines, ensuring vulnerabilities are caught early without disrupting development.

✅ Key Responsibilities

• Regularly dive deep into mobile, web app technologies in order to understand feature development and proactively hunt for vulnerabilities
• Be proficient in securing cloud-native applications, ensuring that security best practices are applied consistently across our cloud environment
• Be proficient in threat modelling and guide developers in secure design principles to prevent vulnerabilities from being introduced in the first place
• Help remediate vulnerabilities through strategic initiatives, writing patches, or creating understandable and actionable vulnerability tickets
• Be the subject matter expert across a wide range of security areas, particularly in Application Security
• Make security invisible when possible, believing that gatekeeping and blocking product teams should be avoided in favour of enabling secure development
• Mentor and coach junior engineers, sharing your knowledge to help raise the security bar across the organisation
• Leverage automation and security tools to seamlessly integrate security into our CI/CD pipelines, ensuring vulnerabilities are caught early without disrupting development

📌 Required Qualifications

• You have a breadth and depth of knowledge across AppSec; you’re expected to understand topics like why private keys should be stored in the Secure Enclave, the differences between URL Schemes and Universal Links, what presigned URLs are in the context of S3 and the safest storage mechanisms for modern browsers
• You know Burp Suite (or your favourite attack proxy) inside and out; bonus points if you’ve written or contributed to an extension that enhances its functionality
• You have excellent spoken and written communication skills to articulate vulnerabilities clearly and persuasively, advocating for their remediation even when faced with competing production pressures
• As a passionate senior security engineer, you have a blog, public speaking engagements, bug bounty profile, or a Git repository showcasing your work
• You’re comfortable writing proof-of-concept (POC) scripts to demonstrate your findings and their potential impact, as needed
• You have hands-on experience with securing cloud-native applications, ensuring that best practices are consistently applied

🎁 Benefits

• Competitive salary
• Group Life Insurance
• Vitality Health Insurance, with a proactive focus on mental and physical wellbeing
• 24/7 Employee Assistance Programme
• 25 days holiday with the ability to buy extra days
• We invest in your development with a £1,000 professional L&D budget per year
• Access to ‘salary sacrifice’ benefits such as Cycle to Work scheme and pension contribution
• Spacious brand-new office in Liverpool street with an all-day snacks bar
• Enhanced family-friendly leave
• 3 days for L&D or volunteering time off per year
• Flexible working options
• Sabbatical leave
• Share options

🛂 Visa & Eligibility

Tide is a place for everyone. We believe that we can only succeed if we let our differences enrich our culture. Our Tideans come from a variety of backgrounds and experience levels. We consider everyone irrespective of their ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or differently-abled status. We celebrate diversity in our workforce as a cornerstone of our success. Our commitment to a broad spectrum of ideas and backgrounds is what enables us to build products that resonate with our members’ diverse needs and lives.