Information Security Engineer – SOC L2

About the role

As an Information Security Engineer you will monitor and defend Tabby’s infrastructure, applications, and cloud environments from cyber threats. You will lead incident response, develop detection rules, investigate security events, and work with cross‑functional teams to improve the overall security posture.

Key responsibilities

• Monitor logs and alerts from firewalls, IDS/IPS, endpoints, servers and cloud platforms; correlate events to detect advanced threats.
• Fine‑tune detection logic to reduce false positives and maintain real‑time security dashboards.
• Act as frontline responder for incidents, managing detection, containment, eradication, recovery and post‑mortem analysis.
• Research emerging threats, create and tune detection rules, and integrate CTI feeds into security controls.
• Communicate incident status to IT, DevOps, Risk and Compliance teams and mentor junior SOC analysts.

Required profile

• 2–3 years of experience in a SOC or cybersecurity operations role, preferably in a fast‑paced fintech environment.
• Strong knowledge of incident handling, log analysis, threat modeling and modern application architectures (REST APIs, microservices).
• Experience with security tools such as DLP, AV/anti‑malware, phishing detection and security awareness programs.

Required skills

• SIEM platforms, SOAR tools, EDR/XDR solutions.
• Threat Intelligence platforms and integration of CTI feeds.
• Cloud‑native logging and monitoring tools.
• Python scripting for automation.
• DLP, AV/anti‑malware, phishing detection, user‑behavior analytics.