Security Engineer 3 - Vulnerability Management

Overview

You’ll work in Tide’s Product Security Remediation Operations team, operating vulnerability management by turning security findings into prioritised, actionable work and driving fixes to closure.

What you’ll do

• Triage and validate vulnerabilities from Tide’s security tooling to confirm real, exploitable, relevant issues.
• Support risk-based prioritisation using severity, exploitability, asset criticality, and business context.
• Automate remediation workflows in Seemplicity, including routing, ticketing, deduplication, and escalation logic.
• Verify fixes via targeted re-scans or manual checks before tickets are closed.
• Explain findings to engineering and IT and advise on practical fixes with technical context.
• Build reports and dashboards for vulnerability posture, remediation progress, SLA adherence, and trends.

What you’ll need

• Hands-on experience in vulnerability management or a similar analytical security role.
• Familiarity with vulnerability/exposure tooling including Wiz, Semgrep, CrowdStrike Exposure Management, and EASM platforms.
• Ability to interpret and validate scanner findings and understand vulnerability scoring/prioritisation concepts.
• Knowledge of risk acceptance and exception management workflow for deferred remediations.
• Experience with or strong appetite for workflow automation/orchestration (e.g., Seemplicity, scripting, integrations).
• Confidence building reports and dashboards from complex/“messy” data into clear narratives.
• Strong communication and stakeholder skills for explaining technical findings to engineers.