Analyst Information Security📣 Job Ad

About the Analyst Information Security Role

Tabby is seeking an Analyst Information Security to join its team in Riyadh. This full-time position requires 0-1 years of experience and focuses on supporting the organization's security architecture and infrastructure protection functions under the guidance of senior security professionals. The role offers hands-on exposure to infrastructure security, cloud security, controls development, and security awareness within a fast-paced Fintech environment.

Role Overview and Responsibilities

The Analyst Information Security will contribute to securing cloud environments, maintaining endpoint protection solutions, supporting secure software development lifecycle (SDLC) practices, and assisting in security monitoring and incident response activities. This foundational role is designed to build the technical depth and cross-functional collaboration skills necessary for growth into a fully independent security engineer.

Key Areas of Support

• Security Architecture Support: Assist in documenting and maintaining security architecture designs, reviewing system configurations against security baselines, and updating architecture diagrams.
• Cloud Security Support: Monitor cloud environments for misconfigurations using CSPM tools, support the review of cloud infrastructure configurations, and track CI/CD pipeline security findings.
• Secure SDLC Support: Assist in integrating and operating security tools within CI/CD pipelines, triage automated security scan results, and support source code review activities.
• Penetration Testing & Vulnerability Assessment Support: Assist in executing vulnerability assessment test cases, support infrastructure vulnerability scanning, and help maintain the vulnerability register.
• Endpoint & Infrastructure Security Support: Assist in monitoring endpoint protection solutions, support infrastructure security reviews, and help maintain firewall ruleset documentation.
• Controls Development & Project Support: Assist in developing security assessment checklists, support project management for security tasks, and help prepare status updates on security control implementation.
• Security Awareness & Monitoring Support: Assist in phishing simulation campaigns, support security awareness training, review alerts from monitoring platforms, and help maintain incident response playbooks.

Required Experience and Skills

This role is suitable for individuals with 0-1 years of experience. The position requires a foundational understanding of security concepts and a willingness to learn and apply them in a practical setting. Key skills will be developed through hands-on experience, including documentation, monitoring, basic analysis, and collaboration with various technical teams.

Work Environment

The role is a full-time position based in Riyadh. The environment is a fast-paced Fintech setting, requiring collaboration with IT, DevOps, and Risk Management teams. The position offers direct exposure to senior security architects and engineers, fostering professional development and skill enhancement.