Security Engineer 3 - Vulnerability Management

A BOUT TIDE At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting. Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France. Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love. Tide facts: Tide is available for UK, Indian, German and French SMEs Over 2 million members: 900,000 UK and 1,100,000 in India and growing rapidly Over $300 million raised in funding Over 2,800 Tideans globally Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026 We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg ABOUT THE TEAM: The Product Security team at Tide is responsible for embedding security across the full product surface, from secure design and threat modelling through to application-layer controls and vulnerability management. Within Product Security, the Remediation Operations function owns the day-to-day engine of Tide's vulnerability management programme: turning a high volume of findings from across our tooling estate into clear, prioritised, actionable work for engineering and IT teams. This role sits at the heart of that function. You will be the connective tissue between security tooling and the teams who fix things, making sure the right vulnerabilities reach the right people with the right context, and that they actually get resolved. This is a delivery-focused role for someone who measures success not by findings raised, but by risk reduced. ABOUT THE ROLE: As a Security Engineer for Vulnerability Management, you will: Triage and validate vulnerabilities surfaced by Tide's core security tooling, including Wiz, Semgrep, CrowdStrike Exposure Management and our External Attack Surface Management (EASM) platform, separating signal from noise and confirming which findings are real, exploitable and relevant to Tide. Support risk-based prioritisation , helping to rank findings by severity, exploitability, asset criticality and business context, so that limited engineering effort is always pointed at what matters most. Automate remediation workflows within Tide's vulnerability management platform (Seemplicity), building and refining the routing, ticketing, deduplication and escalation logic that keeps findings moving without manual overhead. Verification and Validation of the Fix implemented through targeted re-scanning or manual checks, ensuring risks are genuinely mitigated before tickets are formally closed. Act as a trusted partner to engineering and IT teams , explaining the importance and technical detail of specific findings, advising on practical fixes, and helping teams understand the reasoning behind each request rather than treating it as a box-ticking exercise. Build reports and dashboards that give clear visibility of vulnerability posture, remediation progress, SLA adherence and trends, tailored for both technical owners and senior stakeholders. Design and run nudging strategies to shift fix behaviours across engineering and IT, using data, well-timed prompts and the right incentives to drive down time-to-remediate and reduce recurring issues. Maintain the health of the remediation pipeline , monitoring ageing findings, chasing stalled items, identifying systemic blockers and feeding that insight back into the wider vulnerability manag…