Lead Cybersecurity Engineer — Cloud, DevSecOps & Threats

Tabby; Riyadh; On-site; SAR 350,000 - 650,000; Full time

Job summary

Tabby is seeking a Lead Cyber Security Engineer in Riyadh to provide technical leadership across defensive security and to drive security initiatives. You will manage a team of security engineers and analysts while coordinating with IT, engineering, and compliance groups to strengthen Tabby’s security posture.

The role requires hands-on expertise in cloud security (GCP/AWS), secure SDLC, and vulnerability management, with a track record in penetration testing and incident response.

Qualifications

• 5+ years of cybersecurity experience with technical leadership or senior responsibilities.
• Strong expertise in security architecture, cloud security, AppSec/DevSecOps and vulnerability management.
• Hands-on experience with offensive and defensive security including penetration testing, red/purple teaming, and incident response.
• Proficiency with SIEM, EDR/XDR, CSPM, DLP, and vulnerability management platforms.
• Solid knowledge of GCP/AWS, IAM, Terraform, Kubernetes and CI/CD security.
• Experience with SAST, DAST, SCA and secure SDLC practices.
• Familiarity with SAMA CSF, NCA ECC, PCI-DSS and ISO 27001.
• Strong leadership, stakeholder management and team development skills.
• CISSP/CISM and OSCP or equivalent certifications are required.

Responsibilities

• Lead security architecture and design reviews across IT, cloud, and product initiatives.
• Drive cloud security across GCP and AWS, including IAM, security posture, and infrastructure security.
• Own the Secure SDLC / DevSecOps program, including SAST, DAST, SCA and container security.
• Lead vulnerability management, penetration testing and red team engagements.
• Oversee endpoint, infrastructure and firewall security.
• Drive detection engineering, threat intelligence and complex incident response.
• Develop and mentor a team of cybersecurity engineers and analysts.
• Partner with Engineering, IT, Compliance and other teams to improve Tabby’s overall security posture.

Skills

Security architecture

Cloud security

DevSecOps

Vulnerability management

Penetration testing

Incident response

Red team

Purple team

SIEM

EDR/XDR

CSPM

DLP

Terraform

Kubernetes

CI/CD security

SAST

DAST

SCA

Secure SDLC

IAM

GCP

AWS

PCI-DSS

ISO 27001

SAMA CSF

NCA ECC

Leadership

Stakeholder management

CISSP

CISM

OSCP

Tools

SIEM

EDR/XDR

CSPM

DLP

Terraform

Kubernetes

CI/CD tools

SAST tools

DAST tools

SCA tools

Job description

Tabby is seeking a Lead Cyber Security Engineer in Riyadh to provide technical leadership across defensive security and to drive security initiatives. You will manage a team of security engineers and analysts while coordinating with IT, engineering, and compliance groups to strengthen Tabby’s security posture.

The role requires hands-on expertise in cloud security (GCP/AWS), secure SDLC, and vulnerability management, with a track record in penetration testing and incident response.