Senior SOC Engineer: Elastic SIEM & Threat Intel

تابي; Riyadh; On-site; SAR 300,000 - 500,000; Full time

Job summary

Tabby is seeking a Senior Engineer, Information Security (SOC) to own and advance our Security Operations Center capabilities, with a focus on Elastic SIEM engineering, detection development, and threat intelligence.

This role is a hands-on senior contributor who will improve how security threats are detected, investigated, and managed in our regulated fintech environment, coordinating with internal teams and external partners.

Qualifications

• 4-5 years of progressive SOC/SIEM-related experience.
• Hands-on Elastic Stack SIEM administration and architecture experience.
• Experience with MITRE ATT&CK and detection coverage analysis.
• Experience integrating logs from cloud environments (AWS, GCP).
• Strong scripting/automation skills, preferably Python.

Responsibilities

• Own and improve Elastic SIEM architecture, performance, and reliability.
• Design and maintain log ingestion pipelines, parsers, and retention strategies.
• Develop detection use cases aligned with MITRE ATT&CK.
• Drive threat intelligence operations and validation within Elastic SIEM.
• Lead incident reviews and monitor SOC provider performance.

Skills

Elastic Stack

SIEM engineering

Detection engineering

Threat intelligence

Python scripting

Incident investigation

Documentation

Communication

Mentoring

Tools

Cyble

AWS

GCP

SIEM administration

Job description

Tabby is seeking a Senior Engineer, Information Security (SOC) to own and advance our Security Operations Center capabilities, with a focus on Elastic SIEM engineering, detection development, and threat intelligence.

This role is a hands-on senior contributor who will improve how security threats are detected, investigated, and managed in our regulated fintech environment, coordinating with internal teams and external partners.