Job description
About The Role
As an Offensive Security Engineer you will be:
Reviewing web/mobile applications, source code, operating systems, and network security architectures; finding vulnerabilities and defining effective strategies for remediation and hardening.
Identifying gaps in controls and vulnerabilities in our Cloud infrastructure with containerised settings and GitOps deployment pipelines.
Ability to think critically and identify areas of technical and non-technical risk.
Research and develop tools, techniques and exploits specific to Tide.
Help with the triaging and perform validations of external security submissions whenever required.
Communicate effectively findings and remediation actions with both technical and non-technical teams.
Coaching engineers across both Security and broader technical teams in the principles and practices of offensive security.
Partner with internal security and engineering teams on team-oriented engagements that uncover vulnerability and detection opportunities across systems.
Identify weaknesses in product security controls – including vulnerabilities, misconfigurations, and gaps in processes and procedures
Work with the Tide engineering teams to plan and scope internal/external pen-testing.
Bring your red team hat to support Incident Response
What We Are Looking For
First and foremost you will be passionate about security and secure application design. You will love helping engineers create more secure web and mobile applications.
You will be comfortable explaining security issues and concerns to product owners, engineers, area VPs and executives and love the feeling you get when this results in them releasing a more resilient product.
You have experience working within the Fintech or tech sector.
You have worked within a quick-scaling business.
You have experience in attack simulation and vulnerability research.
You are comfortable with writing tooling in Python, Java, go etc.
-