Threat Detection Engineer - 2

A BOUT TIDE At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting. Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France. Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love. Tide facts: Tide is available for UK, Indian, German and French SMEs Over 2 million members: 900,000 UK and 1,100,000 in India and growing rapidly Over $300 million raised in funding Over 2,800 Tideans globally Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026 We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg ABOUT THE TEAM: The Tide Security Engineering team is made up of three core areas: Product Security, Threat Detection & Response, and Identity. Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape ABOUT THE ROLE: As a Threat Detection Engineer - 2, you’ll be: Building detection rules and supporting the team in our response life cycle. Hands-on with the SIEM and Security infrastructure; from creating log parsers, Infrastructure as Code, to Detection rules and automation scripts. Creating novel automations and lambda functions to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes. We want you to run with the “anything is possible” mantra. Support our ongoing threat hunting activities for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers. You'll support our response to threats across AWS, GCP, internal applications, and employee endpoints (Windows, macOS). Supporting the wider TDR team to build detections across the business, helping to secure Tide by developing business specific detections. Responsible for ensuring good quality detections which align with our standards and best practices . Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency. Support on complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery. WHAT WE ARE LOOKING FOR Strong knowledge with one of the following: Splunk, Chronicle, Panther. Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments. Passion for passing on knowledge to fellow colleagues. Hands-on attitude and the ability to drive solutions to completion. Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks. Excellent spoken and written communication skills. Experience with writing automation and scripts; bonus points if you have a repository to show-case your work. WHAT YOU’LL GET IN RETURN: Our location-specific employee