{"id":4019149,"url":"https://alion.io/job/tide-security-operations-responder","title":"Security Operations Responder","company":{"id":1091,"name":"Tide","domain":"tide.co","url":"https://alion.io/company/tide","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":79,"open_postings":14,"ghost_share":0,"stale_share":0.643,"repost_share":0,"time_to_fill_p50_days":76,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Slack","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-10T12:56:57Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T14:15:51Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"ABOUT TIDE\nAt Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting.\nTide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France.\nUsing advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love.\nTide facts:\nTide is available for UK, Indian, German and French SMEs\nOver 2 million members globally and rapidly growing\nOver $300 million raised in funding\n3,000 Tideans globally\nRecognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026\nWe have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg\nABOUT THE ROLE\nThe Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response\nProduct Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.\nThreat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.\nIdentity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi-factor authentication, and granular role-based access controls to safeguard our internal operations.\nWhile each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.\nAs a Security Operations Responder, you’ll be on the front line of defending Tide. Your primary focus is actively investigating threats through our security data lake and SOAR platform - but we don’t want anyone working the same alert by hand twice. Your goal is to make investigation effective at scale: cutting manual effort through automation, and working hand-in-hand with our Detection Engineering team to improve the true positive / false positive efficacy of what lands in the queue.\nWhen the security queue is empty, you’ll be building - automations, enrichment and your own detections. An open mind and a curious approach are key: every investigation is a chance to make the next one faster and sharper.\nAs a Security Operations Responder, you’ll be:\nInvestigating and responding to threats (your primary focus)\nActively triaging and investigating security alerts and threats through our security data lake and SOAR platform, across AWS, GCP, SaaS (such as Google Workspace and Okta), internal applications and employee endpoints (Windows, macOS).\nDriving every investigation to a clear, well-evidenced outcome - establishing scope, impact and root cause, and taking containment and remediation actions quickly and confidently.\nLeading the response to complex or high-severity incidents where needed, coordinating across security, IT and engineering teams through containment, remediation and recovery.\nDocumenting investigations clearly and consistently, and contributing to the runbooks and investigation standards the whole team works to.\nScaling investigation through automation & Improving detection efficacy \nReducing manual investigation by building SOAR playbooks, security automations and services - from data enrichment and context gathering through to automated response, such as removing phishing emails from employee mailboxes. We want you to run with the “anything is possible” mantra.\nSpotting repetitive work in the queue and turning it into automated workflows, so the team’s time goes on the investigations that genuinely need human judgement.\nIdentifying gaps in log sources, parsing and enrichment in the data lake, and working to close them so investigations have the visibility they need.\nFeeding investigation outcomes back to the Detection Engineering team - flagging noisy rules, tuning false positives and highlighting coverage gaps - to continuously improve TP/FP efficacy.\nTracking investigation metrics (such as MTTD, MTTR, TP/FP rate and automation coverage) and using them to prioritise where to improve next.\nBuilding when the queue is clear\nWriting, testing and shipping your own detections alongside Detection Engineering, following our test-driven, detections-as-code practices.\nProactively hunting for sophisticated threats across our infrastructure, using threat intelligence and lessons from past investigations to stay ahead of attackers.\nBuilding or enhancing internal tools that streamline investigation, improve data visibility and increase response efficiency.\nSharing knowledge and mentoring other members of the team, raising the bar for how we investigate and respond.\nWHAT WE ARE LOOKING FOR\nSignificant hands-on experience in security operations, incident response or threat investigation, ideally in a cloud-native environment.\nStrong investigative instincts and log analysis skills at scale, with the ability to query a security data lake or SIEM fluently - strong knowledge of one of the following: Splunk, Scanner, Sentinel, SecOps.\nStrong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments, and the ability to map activity to frameworks such as MITRE ATT&CK.\nStrong experience in security automation, from writing scripts (e.g. Python) to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating investigation and response tasks.\nExperience writing or tuning detections, and a clear view of what separates a high-fidelity alert from a noisy one.\nCalm, methodical judgement during live incidents, including knowing when and how to escalate.\nAn open mind and a curious approach - you enjoy pulling on threads, and you don’t stop at “false positives” without understanding why.\nHands-on attitude and the ability to drive solutions to completion.\nPassion for passing on knowledge to fellow colleagues.\nExcellent spoken and written communication skills, including clear investigation write-ups for both technical and non-technical audiences.\nBonus points if you have a repository showcasing automations, detections or tooling you’ve built.\nWHAT YOU’LL GET IN RETURN\nOur location-specific employee benefits are designed to cater to the unique needs of Tideans: \nCompetitive Compensation - competitive salary.\nTime Off - Generous annual leave on top of bank holidays.\nParental Leave - Paid maternity, paternity, and adoption leave to support your family journey.\nSabbatical - Extended unpaid and paid leave options after completing milestone years with Tide.\nHealth Insurance - Private family insurance with additional OPD coverage and top-up options.\nLife & Accident Cover - Comprehensive accidental and life insurance protection.\nMental Wellbeing - Access to therapy sessions, courses, meditations, and workshops.\nVolunteering & Development Days - Paid days annually for volunteering or personal growth.\nLearning & Development - Annual budget for books, courses, coaching, and more.\n WOO (Work Outside the Office) - Work from abroad for up to 90 days annually.\nHome Office Setup - Contribution towards setting up your home office.\nLaptop Ownership - Keep your old laptop and get a new one when it’s time for a replacement.\n Snacks & Meals - Office perks with snacks, coffee, tea, and lunch (location dependent).\nTIDE IS A PLACE FOR EVERYONE\nAt Tide, we believe that we can only succeed if we let our differences enrich our culture. Our Tideans come from a variety of backgrounds and experience levels. We consider everyone irrespective of their ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or differently-abled status. We celebrate diversity in our workforce as a cornerstone of our success. Our commitment to a broad spectrum of ideas and backgrounds is what enables us to build products that resonate with our members’ diverse needs and lives. \nWe are One Team and foster a transparent and inclusive environment, where everyone’s voice is heard.\nAt Tide, we thrive on diversity, embracing various backgrounds and experiences. We welcome all individuals regardless of ethnicity, religion, sexual orientation, gender identity, or disability. Our inclusive culture is key to our success, helping us build products that meet our members' diverse needs. We are One Team, committed to transparency and ensuring everyone’s voice is heard.\nDisclaimer\nIt has come to our attention that individuals or agencies are falsely claiming to represent Tide and are reaching out to candidates regarding job opportunities. Please be aware that:\nTide does not charge any fees at any stage of the recruitment process.\nAll official Tide job opportunities are listed exclusively on our Careers Page and applications should be submitted through this channel.\nCommunication from Tide will only come from an official @tide.co email address.\nTide does not work with agencies or recruiters without prior formal engagement, and we do not authorize third parties to make job offers on our behalf.\nIf you are contacted by anyone misrepresenting Tide or requesting payment, please treat it as fraudulent and report it to us immediately at \nYour safety and trust are important to us, and we are committed to ensuring a fair and transparent recruitment process.\nTide leverages AI to enhance our hiring experience. You can read more about how we use AI in our recruitment process in our AI Policy.\nYour personal data will be processed by Tide for recruitment purposes and in accordance with Tide's Recruitment Privacy Notice.","description_format":"text","description_chars":10668,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Health insurance","Home office","Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Business & SME Lending","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-11-10T14:15:51Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":76,"reasons":["conf:2","win:early"],"computed_at":"2026-11-10T16:42:43Z"},"pay":null,"html_url":"https://alion.io/job/tide-security-operations-responder","json_url":"https://alion.io/job/tide-security-operations-responder.json","meta":{"generated_at":"2026-11-10T16:42:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4452,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1091},"rest":"https://alion.io/mcp/rest/get_company?id=1091"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftide-security-operations-responder"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftide-security-operations-responder"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftide-security-operations-responder"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tide-security-operations-responder\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftide-security-operations-responder"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4019149}},{"tool":"search_jobs","arguments":{"company":"tide.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4019149},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}