Engineer, Threat Detection – 5

Overview

In this role, you’ll strengthen Tide’s security posture by building and maintaining a robust threat detection and response platform. You’ll work within the Threat Detection & Response area of Security Engineering, collaborating with cross-functional teams to automate detections and respond to incidents. You’ll hunt for threats across cloud, SaaS, and endpoints, continuously improving detections and reducing false positives. This is a hands-on role with significant impact on keeping Tide resilient and secure.

Pay / Benefits

• Competitive salary and share options
• Generous annual leave
• Parental leave
• Sabbatical options
• Health insurance
• Learning & development budget

Responsibilities

• Develop and tune detections in the SIEM and security tooling; create custom log-parsers for in-house apps
• Configure alert rules, perform log analysis and optimize detections to reduce false positives
• Build security automations and services to streamline tasks (e.g., data enrichment, phishing remediation)
• Proactively hunt for sophisticated threats across AWS, GCP, internal apps, and employee endpoints
• Collaborate with cross-functional teams to implement business-specific threat detection rules
• Ensure detector quality and uptime via test-driven development and proactive health monitoring
• Identify opportunities to enhance internal tools to improve visibility and response efficiency
• Lead complex incident investigations and coordinate with security, IT, and engineering teams
• Support the security incident response on-call rota

Key requirements

• Experience with one of: Splunk, Scanner, Sentinel, SecOps
• Strong understanding of modern attack and defense techniques for Cloud (AWS, GCP), SaaS (Google Workspace, Okta) and desktop (Windows, macOS)
• Hands-on security automation experience; ability to write scripts and create end-to-end automated workflows
• Familiarity with SOAR platforms and automating threat detection and response tasks
• Excellent written and spoken communication skills
• Demonstrated ability to drive solutions to completion
• Bonus: a repository showcasing automation work

• Knowledge transfer and mentoring
• Proactive and hands-on mindset
• Collaborative with cross-functional teams
• SIEM tuning and log analysis
• Custom log-parsers development
• Security automation scripting

…