Principal Product Security Engineer

Overview

In this role you will strengthen Tide’s product security across mobile and web apps, ensuring secure design and vulnerability prevention. You will collaborate with engineering teams to enable secure development and protect cloud-native services. You’ll drive threat modelling, remediation initiatives, and automation to embed security into CI/CD. This position offers impact by shaping security across Tide’s products and supporting a resilient, data‑driven organization.

Pay / Benefits

• Competitive salary
• Group Life Insurance
• Vitality Health Insurance
• 24/7 Employee Assistance Programme
• 25 days holiday + buy extra days
• 1,000 professional L&D budget

Responsibilities

• Dive into mobile and web technologies to hunt vulnerabilities
• Secure cloud-native applications with consistent security practices
• Lead threat modelling and guide secure design to prevent issues
• Remediate vulnerabilities via patches or actionable tickets
• Serve as a subject matter expert in Application Security
• Enable secure development by reducing gatekeeping
• Mentor junior engineers to raise the security bar
• Automate security tooling and integrate into CI/CD pipelines

Key requirements

• Passion for security and resilient software development
• Ability to explain issues to product owners, engineers, and executives
• Interest in Infosec trends and new tooling
• Broad AppSec knowledge (e.g., Secure Enclave, URL Schemes vs Universal Links, presigned URLs)
• Proficiency with Burp Suite; bonus for extensions
• Excellent written and spoken communication to advocate remediation
• Active portfolio of work (blog, talks, bug bounty, Git repo) and PoC scripting
• Hands-on experience securing cloud-native applications

• strong communication
• mentoring and coaching
• collaboration across teams
• Application Security (AppSec)
• Cloud-native security
• Threat modelling

…