Information Security Engineer – SOC Level 2

About the role

Tabby is looking for an Information Security Engineer to join its SOC team in Saudi Arabia. You will monitor, detect, and respond to cyber threats across the company’s infrastructure, applications, and cloud environments, helping to protect millions of users and partner brands.

Key responsibilities

• Monitor and analyze logs and alerts from firewalls, IDS/IPS, endpoints, servers, and cloud platforms.
• Correlate events from multiple sources to identify advanced threats and reduce false positives.
• Fine‑tune detection rules, thresholds, and dashboards to improve signal‑to‑noise ratio.
• Lead incident response from detection through containment, eradication, recovery, and post‑mortem reporting.
• Research emerging threats, develop detection use cases, and integrate CTI feeds into security controls.

Required profile

• 2–3 years of experience in a SOC or cybersecurity operations role, preferably in a fast‑paced fintech environment.
• Strong knowledge of incident handling, log analysis, threat modeling and security best practices.
• Familiarity with DLP, AV/anti‑malware systems, phishing detection and user‑behavior analytics.
• Experience working in culturally diverse, collaborative teams.
• Security certifications (e.g., Security+, CySA+, eCIR) are a plus.

Required skills

• SIEM platforms (e.g., Splunk, QRadar)
• SOAR tools
• EDR/XDR solutions
• Threat Intelligence platforms and CTI feed integration
• Cloud‑native logging and monitoring tools (AWS, Azure, GCP)
• Python scripting for automation
• DLP, AV/anti‑malware technologies
• Phishing detection and user‑behavior analytics