SOC Security Engineer: Threat Detection & Incident Response

تابي; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Job summary

Tabby is seeking an Information Security Engineer to monitor infrastructure, applications, and cloud environments for threats in a fast-paced fintech setting. You will lead incident response, tune detection rules, and collaborate with IT, DevOps, Risk, and Compliance to strengthen security posture.

You will work with SIEM/SOAR/EDRXDR and threat intelligence platforms, mentor junior analysts, and drive security analytics and reporting across the organization.

Qualifications

• 3–4 years of experience in a SOC/cybersecurity operations role.
• Strong knowledge of incident handling, alert triage, log analysis, and threat modeling.
• Understanding of REST APIs, microservices, and modern app architectures.
• Experience with phishing detection, user behavior analytics, and security awareness campaigns.
• Security certifications such as Security+, CySA+, GCIA, GMON preferred but not required.

Responsibilities

• Monitor and analyze logs/alerts from firewalls, IDS/IPS, endpoints, servers, and cloud platforms.
• Perform correlation of events to identify threats and unusual patterns.
• Fine-tune alert thresholds to reduce false positives and improve signal-to-noise ratio.
• Maintain dashboards and reporting for real-time security posture visibility.
• Lead incident response lifecycle: detection, containment, eradication, recovery, lessons learned.
• Coordinate with internal teams and external vendors during high-severity incidents.
• Perform root-cause analysis and forensic investigations using artifacts.
• Maintain detailed incident documentation and post-mortem reports.

Skills

Log analysis

Incident handling

Threat modeling

Python scripting

Cloud security

Cross-functional collaboration

Security alerts tuning

Tools

SIEM platforms

SOAR tools

EDR/XDR

Threat intelligence platforms

Job description

Tabby is seeking an Information Security Engineer to monitor infrastructure, applications, and cloud environments for threats in a fast-paced fintech setting. You will lead incident response, tune detection rules, and collaborate with IT, DevOps, Risk, and Compliance to strengthen security posture.

You will work with SIEM/SOAR/EDRXDR and threat intelligence platforms, mentor junior analysts, and drive security analytics and reporting across the organization.