SOC L2 Information Security Engineer (FinTech)

Tabby | تابي; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Tabby is seeking an Information Security Engineer in Saudi Arabia to monitor and defend our infrastructure, apps, and cloud environments. You will lead incident response, tune detection rules, investigate events, and collaborate with cross-functional teams to strengthen security posture.

You will work with SIEM, SOAR, EDR/XDR, and CTI platforms, and mentor junior analysts while coordinating with IT, Risk, and Compliance during incidents.

Qualifications

• Experience in a SOC or cybersecurity operations role.
• Strong incident handling, alert triage, log analysis, and threat modeling knowledge.
• Familiarity with cloud environments, REST APIs, microservices and modern app architectures.
• Experience with phishing detection and security awareness campaigns.
• Security certifications (Security+, CySA+, GCIA, GMON) preferred but not required.

Responsibilities

• Monitor and analyze logs and alerts from firewalls, IDS/IPS, endpoints, servers and cloud platforms.
• Lead incident response efforts through detection, containment, eradication, recovery and lessons learned.
• Develop and tune detection rules and threat-hunting use cases across platforms.
• Coordinate with IT, DevOps, Risk and Compliance during incidents and investigations.
• Mentor junior analysts and contribute to SOC training.

Skills

SOC operations

Incident handling

Log analysis

Threat modeling

Cloud security

REST APIs & microservices

Python scripting

Tools

SIEM

SOAR

EDR/XDR

Threat Intelligence platforms

Cloud-native logging tools

Job description

Tabby is seeking an Information Security Engineer in Saudi Arabia to monitor and defend our infrastructure, apps, and cloud environments. You will lead incident response, tune detection rules, investigate events, and collaborate with cross-functional teams to strengthen security posture.

You will work with SIEM, SOAR, EDR/XDR, and CTI platforms, and mentor junior analysts while coordinating with IT, Risk, and Compliance during incidents.