Information Security Engineer (SOC)

About Tabby

Tabby is a FinTech company focused on reshaping financial interactions for consumers. The company provides a platform that allows users to manage their spending and utilize flexible payment options. With over 25 million users, Tabby facilitates payment splitting online and in-store without interest or fees. Over 70,000 global brands, including Amazon, Noon, IKEA, and SHEIN, integrate Tabby to enhance customer payment experiences. Tabby generates over $18 billion in annual transaction volume and is recognized as a leading FinTech in the GCC region, having launched in 2019 and secured over $1 billion in funding, valuing the company at $ billion.

The Role of Information Security Engineer (SOC)

Tabby is seeking an Information Security Engineer (SOC) to join its team in Riyadh, Saudi Arabia. This full-time role involves monitoring and defending the company's infrastructure, applications, and cloud environments against cyber threats. The engineer will be responsible for leading incident response, developing detection rules, investigating security events, and collaborating with various teams to enhance the overall security posture. The position requires 2-5 years of relevant experience.

Key Responsibilities

• Monitor and analyze logs and alerts from firewalls, IDS/IPS, endpoints, servers, and cloud platforms.
• Correlate events from multiple sources to identify advanced threats and unusual behavior patterns.
• Fine-tune alert thresholds and detection logic to reduce false positives.
• Maintain dashboards and reporting for real-time visibility into security posture.
• Serve as a frontline responder for security incidents, managing them through their lifecycle.
• Coordinate with internal stakeholders and external vendors during high-severity incidents or data breaches.
• Perform root cause analysis and forensic investigations using endpoint and network-based artifacts.
• Maintain detailed incident documentation and contribute to post-mortem analysis and reports.
• Research emerging threats and trends.
• Contribute to the creation and tuning of detection rules, threat-hunting queries, and use cases across multiple platforms.
• Maintain the CTI Platform and integrate CTI feeds with security controls for active CTI-driven detections.
• Communicate effectively with cross-functional teams including IT, DevOps, Risk, and Compliance during incidents.
• Provide concise and clear updates to stakeholders and management during incident handling.
• Mentor junior analysts and assist in training efforts within the SOC team.

Required Experience

Candidates should possess 2-5 years of experience in information security, specifically within a Security Operations Center (SOC) environment. This includes practical experience in security monitoring, incident response, and threat detection.

Work Environment and Collaboration

The Information Security Engineer will work within a dynamic environment, collaborating with various internal teams such as IT, DevOps, Risk, and Compliance. Effective communication and teamwork are essential for managing security incidents and enhancing the company's defense mechanisms.

Location

This full-time position is based in Riyadh, Riyadh, Saudi Arabia.