Cyber Security Lead - Cloud Security & SDLC Expert

Tabby | تابي; Riyadh; On-site; SAR 450,000 - 600,000; Full time

Job summary

Tabby is looking for a Cyber Security Lead to guide the Information Security team in Riyadh, driving security initiatives across IT, cloud, and product lines. You will lead architecture reviews, cloud security, and vulnerability management while mentoring engineers and coordinating with Compliance and Engineering teams.

The role requires 5+ years in cybersecurity with leadership, strong knowledge of GCP/AWS, DLP, EDR/XDR, and CISSP/CISM or OSCP. Saudi-based applicants preferred.

Qualifications

• 5+ years of experience in cybersecurity/information security with leadership
• Experience leading security programmes across security architecture, cloud security, vulnerability management and application security
• Strong understanding of defensive and offensive security including penetration testing, red/purple teaming, threat hunting and incident response
• Hands-on experience with SIEM, EDR/XDR, vulnerability management, CSPM, DLP and security monitoring platforms
• Strong knowledge of GCP and/or AWS, IAM, cloud security and infrastructure security
• Experience with DevSecOps, Secure SDLC, SAST, DAST, SCA and container security
• Strong scripting and automation skills and the ability to develop or oversee security tooling
• Knowledge of SAMA CSF, NCA ECC, PCI-DSS and ISO 27001
• Experience working in a regulated FinTech or banking environment
• Strong technical leadership, stakeholder management and team development skills
• CISSP/CISM and OSCP or equivalent certifications are required.

Responsibilities

• Lead security architecture and design reviews across IT, cloud, and product initiatives
• Drive cloud security across GCP and AWS, including IAM, cloud security posture, and infrastructure security
• Lead the Secure SDLC / DevSecOps programme, including application security and security tooling across CI/CD
• Own vulnerability management, including remediation, penetration testing and red team engagements
• Oversee endpoint, infrastructure and network security, including EDR, DLP and firewall security
• Lead detection engineering, threat intelligence and incident response, including complex investigations
• Manage and develop a team of security engineers and analysts with mentoring and career development
• Partner with Engineering, IT, Compliance and other teams to improve overall security posture and standards

Skills

Security architecture

Cloud security

Vulnerability management

DevSecOps

SAST/DAST/DSC

ISO 27001

PCI-DSS

CISSP/CISM

OSCP

Team leadership

Tools

SIEM/XDR

Cloud platforms (GCP/AWS)

EDR

DLP

Job description

Tabby is looking for a Cyber Security Lead to guide the Information Security team in Riyadh, driving security initiatives across IT, cloud, and product lines. You will lead architecture reviews, cloud security, and vulnerability management while mentoring engineers and coordinating with Compliance and Engineering teams.

The role requires 5+ years in cybersecurity with leadership, strong knowledge of GCP/AWS, DLP, EDR/XDR, and CISSP/CISM or OSCP. Saudi-based applicants preferred.