Senior Engineer, Information Security (SOC)

Job description

We are looking for a Senior Engineer, Information Security (SOC) to take technical ownership of our Security Operations Center capabilities. You will own and improve the Elastic SIEM platform, develop advanced detection use cases, and operationalize threat intelligence. You will act as a key technical escalation point, mentor junior team members, and collaborate with internal stakeholders and external partners to strengthen security in a regulated fintech environment.

Requirements

• 4–5 years of progressive experience in SOC operations, SIEM engineering, detection engineering, or cyber threat intelligence
• strong hands‑on experience with Elastic Stack including SIEM administration, architecture, ingestion pipelines, and performance optimisation
• proven ability to develop complex detection rules, correlation logic, and behavioural detections
• experience with MITRE ATT&CK and detection coverage analysis
• practical experience with threat intelligence platforms such as Cyble or equivalent tools
• strong understanding of incident investigation, incident management, and root cause analysis
• experience integrating logs from various sources including AWS and GCP cloud environments
• scripting and automation skills, preferably with Python
• understanding of fintech‑related threats such as account takeover, payment fraud, API abuse, and mobile app threats
• familiarity with security and regulatory frameworks like SAMA CSF, NCA ECC, PDPL, and PCI DSS
• strong analytical, communication, documentation, and problem‑solving skills
• ability to work independently, own complex technical challenges, and support junior colleagues
• required Elastic and GIAC certifications
• CTI certifications expected
• CISSP, CISM, or equivalent senior security certifications are an advantage.

Skills