Department: InfoSec Monitoring
Location: KSA
DescriptionTabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
As Information Security Engineer, you’ll play a key part in monitoring and defending our infrastructure, applications, and cloud environments from cyber threats.
You’ll lead incident response efforts, develop and tune detection rules, investigate security events, and collaborate with cross-functional teams to strengthen our security posture.
Key ResponsibilitiesSecurity Monitoring & Detection
Incident Response & Investigation
Threat Intelligence & Detection Rule Development
Collaboration and Communication
Skills, Knowledge and Expertise 2–3 years of experience in a SOC or cybersecurity operations role, ideally in a fast-paced fintech or enterprise environment. * Strong knowledge of security best practices, including incident handling, alert triage, log analysis, and threat modeling. * Understanding of online technologies, REST APIs, microservices, and modern application architectures. * Experience working in a culturally diverse and collaborative environment. * Familiarity with DLP, AV, and anti-malware systems from an operational monitoring perspective. * Experience with phishing detection, user behavior analytics, and security awareness campaigns. * Security certifications such as Security+, CySA+, eCIR, eCTHPv2, GCIA, or GMON (preferred but not required). * Strong communication skills, especially for coordinating incident response and writing clear incident reports. * Experience with SIEM platforms, SOAR tools, EDR/XDR, and Threat Intelligence platforms. * Familiarity with cloud environments and cloud-native logging and monitoring tools. * Scripting experience (e.g., Python*) to automate tasks and improve SOC efficiency.
