SOC Information Security Engineer: Cloud & Incident Response

تابي; Riyadh; On-site; SAR 240,000 - 320,000; Full time

Job summary

Tabby is seeking an Information Security Engineer (SOC) to monitor and defend our infrastructure, applications, and cloud environments from cyber threats. You will lead incident response, develop detection rules, investigate security events, and collaborate with cross-functional teams to strengthen security posture.

You will work in a fast-paced fintech setting, with responsibilities spanning security monitoring, incident handling, threat intelligence, and collaboration with IT, DevOps, Risk,

Qualifications

• 3–4 years of experience in a SOC or cybersecurity operations role, ideally in a fintech or enterprise environment.
• Strong knowledge of security best practices, including incident handling, alert triage, log analysis, and threat modeling.
• Understanding of online technologies, REST APIs, microservices, and modern application architectures.
• Experience with phishing detection, user behavior analytics, and security awareness campaigns.
• Familiarity with DLP, AV, and anti-malware systems from an operational monitoring perspective.

Responsibilities

• Monitor and analyze logs and alerts from a wide range of sources including firewalls, IDS/IPS, endpoints, servers, and cloud platforms.
• Perform correlation of events from multiple sources to identify advanced threats and unusual patterns of behavior.
• Fine-tune alert thresholds and detection logic to reduce false positives and improve signal-to-noise ratio.
• Maintain dashboards and reporting to provide real-time visibility into security posture.

Skills

SOC operations

Log analysis

Incident response

Threat modeling

Threat hunting

SIEM

SOAR

EDR/XDR

Python scripting

Communication

Tools

SIEM platforms

SOAR tools

EDR/XDR tools

CTI platforms

Job description

Tabby is seeking an Information Security Engineer (SOC) to monitor and defend our infrastructure, applications, and cloud environments from cyber threats. You will lead incident response, develop detection rules, investigate security events, and collaborate with cross-functional teams to strengthen security posture.

You will work in a fast-paced fintech setting, with responsibilities spanning security monitoring, incident handling, threat intelligence, and collaboration with IT, DevOps, Risk,