Lead Cyber Security Engineer: Cloud & DevSecOps Threat Intel

تابي; Saudi Arabia; On-site; SAR 500,000 - 800,000; Full time

Job summary

Tabby in Riyadh seeks a Lead Information Security Engineer to guide the Defensive security team, overseeing security engineering across IT, cloud, and product initiatives.

The role drives cloud security in GCP and AWS, owns the Secure SDLC/DevSecOps program, and leads vulnerability management, incident response, and mentor the security engineers.

Collaborate with Engineering, IT and Compliance to raise Tabby's overall security posture and ensure regulatory alignment.

Qualifications

• 5+ years of cybersecurity experience with leadership responsibilities.
• Strong experience in security architecture, cloud security, AppSec/DevSecOps.
• Hands-on offensive and defensive security including pen testing and incident response.
• Experience with SIEM, EDR/XDR, CSPM, DLP and vulnerability management.
• Knowledge of GCP/AWS, IAM, Terraform, Kubernetes and CI/CD security.
• Experience with SAST, DAST, SCA and secure SDLC practices.
• Knowledge of SAMA CSF, NCA ECC, PCI-DSS and ISO 27001.
• Certifications: CISSP/CISM and OSCP or equivalent.

Responsibilities

• Lead security architecture and design reviews across IT, cloud, and product initiatives.
• Drive cloud security across GCP and AWS including IAM and infrastructure security.
• Own Secure SDLC/DevSecOps program (SAST/DAST/SCA and container security).
• Lead vulnerability management, penetration testing and red team engagements.
• Oversee endpoint, infrastructure and firewall security.
• Drive detection engineering, threat intelligence and complex incident response.
• Develop and mentor a team of cybersecurity engineers and analysts.
• Partner with Engineering, IT, Compliance to improve Tabby's security posture.

Skills

Security architecture

Cloud security

AppSec/DevSecOps

Vulnerability management

SIEM

EDR/XDR

CSPM

DLP

GCP

AWS

IAM

Terraform

Kubernetes

CI/CD security

SAST

DAST

SCA

Secure SDLC

Penetration testing

Incident response

Leadership

Stakeholder management

Tools

SIEM

EDR/XDR

CSPM

DLP

Vulnerability management platforms

Job description

Tabby in Riyadh seeks a Lead Information Security Engineer to guide the Defensive security team, overseeing security engineering across IT, cloud, and product initiatives.

The role drives cloud security in GCP and AWS, owns the Secure SDLC/DevSecOps program, and leads vulnerability management, incident response, and mentor the security engineers.

Collaborate with Engineering, IT and Compliance to raise Tabby's overall security posture and ensure regulatory alignment.