Senior SIEM & Threat Intelligence Engineer

تابي; Saudi Arabia; Sur place; SAR 240 000 - 340 000; Plein temps

Avantages offerts par ce poste

Fintech-focused environment

Career growth in security engineering

Regulatory compliance exposure

Résumé du poste

Tabby is seeking a Senior Engineer, Information Security (SOC) to own and advance our Elastic SIEM platform, drive detection engineering, and operationalize threat intelligence in a fintech regulatory context. You will mentor juniors, collaborate with internal and external partners, and act as a technical escalation point for complex SOC challenges.

In this hands-on role, you’ll strengthen incident response, improve data quality and coverage, and ensure security controls align with SAMA CSF and

Qualifications

• 4-5 years of progressive experience in SOC operations, SIEM engineering, detection engineering, or cyber threat intelligence.
• Strong hands-on experience with Elastic Stack, including SIEM administration, architecture, ingestion pipelines, and performance optimisation.
• Proven ability to develop complex detection rules, correlation logic, and behavioural detections.
• Experience with MITRE ATT&CK and detection coverage analysis.
• Practical experience with threat intelligence platforms such as Cyble, or equivalent tools.
• Strong understanding of incident investigation, incident management, and root cause analysis.
• Experience integrating logs from different sources, including cloud environments such as AWS and GCP.
• Scripting and automation skills, preferably with Python.
• Understanding of fintech-related threats, including account takeover, payment fraud, API abuse, and mobile application threats.
• Familiarity with security and regulatory frameworks such as SAMA CSF, NCA ECC, PDPL, and PCI DSS.
• Strong analytical, communication, documentation, and problem-solving skills.

Responsabilités

• SIEM Engineering & Platform Ownership: Own Elastic SIEM architecture, performance, and reliability; design log ingestion pipelines and data retention strategies.
• Detection Engineering: Develop and improve detection use cases aligned with MITRE ATT&CK; build detections for fintech threats.
• Cyber Threat Intelligence: Drive CTI operations, analyse IOCs and campaigns, validate intelligence for Elastic SIEM.
• SOC Governance & Incident Management: Review high-severity incidents, lead post-incident reviews, oversee provider performance.
• Technical Leadership & Mentorship: Mentor juniors, maintain runbooks, drive continuous improvement across security operations.

Connaissances

SOC operations

SIEM engineering

Detection engineering

Cyber threat intelligence

MITRE ATT&CK

Threat modelling

Incident investigation

Python scripting

Log analysis

Analytical thinking

Outils

Elastic Stack

Cyble

AWS

GCP

Description du poste

Tabby is seeking a Senior Engineer, Information Security (SOC) to own and advance our Elastic SIEM platform, drive detection engineering, and operationalize threat intelligence in a fintech regulatory context. You will mentor juniors, collaborate with internal and external partners, and act as a technical escalation point for complex SOC challenges.

In this hands-on role, you’ll strengthen incident response, improve data quality and coverage, and ensure security controls align with SAMA CSF and