Lead Information Security Engineer (Defensive)

About the role

Tabby is seeking a Lead Information Security Engineer to provide technical leadership across defensive security initiatives. Based in Riyadh, you will manage a team of security engineers and analysts while shaping the company’s security posture.

Key responsibilities

• Lead security architecture and design reviews for IT, cloud, and product initiatives.
• Drive cloud security across GCP and AWS, covering IAM, security posture, and infrastructure protection.
• Own the Secure SDLC / DevSecOps program, including SAST, DAST, SCA and container security.
• Lead vulnerability management, penetration testing and red‑team engagements.
• Oversee endpoint, infrastructure and firewall security.
• Drive detection engineering, threat intelligence and complex incident response.
• Develop and mentor a team of cybersecurity engineers and analysts.
• Partner with Engineering, IT, Compliance and other stakeholders to improve overall security posture.

Required profile

• 5+ years of cybersecurity experience with technical leadership or senior‑level responsibilities.
• Strong background in security architecture, cloud security, AppSec/DevSecOps and vulnerability management.
• Hands‑on experience in offensive and defensive security, including penetration testing, red/purple teaming and incident response.
• Familiarity with SIEM, EDR/XDR, CSPM, DLP and vulnerability management platforms.
• Knowledge of GCP/AWS, IAM, Terraform, Kubernetes and CI/CD security.
• Experience with secure SDLC practices such as SAST, DAST, SCA and container security.
• Understanding of regulatory frameworks like SAMA CSF, NCA ECC, PCI‑DSS and ISO 27001.
• Relevant certifications such as CISSP or CISM and OSCP (or equivalent).

Required skills

• GCP
• AWS
• IAM
• Terraform
• Kubernetes
• CI/CD security
• SAST
• DAST
• SCA
• Container security
• SIEM
• EDR/XDR
• CSPM
• DLP
• Vulnerability management platforms
• Penetration testing
• Red‑team / purple‑team exercises
• Incident response
• Secure SDLC
• Security architecture
• Endpoint security
• Firewall security
• Detection engineering
• Threat intelligence