# Security Operations Responder

**Company**: Tide
**Location**: Bulgaria
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://job-boards.greenhouse.io/tide/jobs/8200280003?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/security-operations-responder-2e142529-725/

## Description

## About Tide

Tide is transforming the small business banking market, supporting over 2 million members globally with business accounts and administrative solutions.

## About the Role

As a Security Operations Responder, you'll be on the front line of defending Tide, investigating threats through our security data lake and SOAR platform.

### Responsibilities

- Investigate and respond to threats, focusing on effectiveness at scale through automation.

- Triage and investigate security alerts across AWS, GCP, SaaS, internal applications, and employee endpoints.

- Drive investigations to clear outcomes, establishing scope, impact, and root cause.

- Lead responses to complex or high-severity incidents, coordinating across teams.

- Document investigations clearly and contribute to team standards.

### Scaling Investigation through Automation & Improving Detection Efficacy

- Build SOAR playbooks and security automations to reduce manual investigation.

- Identify gaps in log sources and work to close them for better visibility.

- Feed investigation outcomes back to the Detection Engineering team to improve detection efficacy.

### Building when the Queue is Clear

- Write, test, and ship your own detections.

- Proactively hunt for sophisticated threats using threat intelligence.

- Build or enhance internal tools for streamlined investigation and response.

## What We're Looking For

- Significant hands-on experience in security operations or threat investigation, ideally in a cloud-native environment.

- Strong investigative instincts and log analysis skills.

- Understanding of modern attack and defence techniques in Cloud, SaaS, and desktop environments.

- Experience in security automation and writing detections.

- Calm judgement during live incidents and excellent communication skills.

## What You'll Get In Return

- Competitive compensation.

- Generous annual leave and bank holidays.

- Parental leave and sabbatical options.

- Health insurance and mental wellbeing support.

- Volunteering and development days.

- Learning and development budget.

- Work from abroad for up to 90 days annually.

- Home office setup contribution.

- Laptop ownership.

- Fully covered multi-sports card.

- Monthly food vouchers.

- Daily breakfast spread and snacks.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- security operations
- incident response
- threat investigation
- cloud security
- SOAR platform
- log analysis
- security automation
- detection writing
- Python scripting

### Nice to have
- Splunk
- Scanner
- Sentinel
- SecOps
- MITRE ATT&CK framework

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/tide/jobs/8200280003?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)