SOC Security Engineer - FinTech | Incident Response | KSA

تابي; Arabia Saudí; Presencial; SAR 180.000 - 240.000; Jornada completa

Descripción de la vacante

Tabby is seeking an Information Security Engineer to join the SOC and safeguard our fintech infrastructure. You will monitor logs and alerts from firewalls, IDS/IPS, endpoints, servers, and cloud platforms, investigate security events, and lead incident response from detection through recovery.

You will develop and tune detection rules, perform root-cause analyses, collaborate with IT, DevOps, Risk, and Compliance, and mentor junior analysts.

Formación

• 3–4 years in a SOC or cybersecurity operations role in fintech/enterprise.
• Strong knowledge of incident handling, alert triage, and log analysis.
• Experience with cloud environments and modern app architectures.
• Familiarity with DLP, AV, phishing detection, and security awareness.

Responsabilidades

• Monitor logs and alerts from firewalls, IDS/IPS, endpoints, servers, and cloud services.
• Lead incident response lifecycles from detection to lessons learned.
• Develop and tune detection rules and SIEM/EDR/CTI detections.
• Collaborate with IT, DevOps, Risk, and Compliance; mentor junior analysts.

Conocimientos

Incident response

Log analysis

Threat modeling

Python scripting

Security best practices

Communication

Cloud monitoring

Herramientas

SIEM platforms

SOAR tools

EDR/XDR

Threat Intelligence platforms

Descripción del empleo

Tabby is seeking an Information Security Engineer to join the SOC and safeguard our fintech infrastructure. You will monitor logs and alerts from firewalls, IDS/IPS, endpoints, servers, and cloud platforms, investigate security events, and lead incident response from detection through recovery.

You will develop and tune detection rules, perform root-cause analyses, collaborate with IT, DevOps, Risk, and Compliance, and mentor junior analysts.