About the Role

Tabby is seeking a Senior Engineer, Information Security (SOC) to lead the technical aspects of its Security Operations Center (SOC) capabilities. This full-time role focuses on SIEM engineering, detection development, and threat intelligence within a regulated fintech environment. The position is for a hands-on individual contributor who will enhance the detection, investigation, and management of security threats.

Key Responsibilities

The Senior Engineer will own and continuously improve the Elastic SIEM platform, develop advanced detection use cases, and operationalize threat intelligence. This role also involves ensuring the quality of incident response and the performance of the managed SOC provider.

SIEM Engineering and Management

• Own and improve the architecture, performance, and reliability of the Elastic SIEM environment.
• Design and maintain log ingestion pipelines, integrations, parsers, and data retention strategies.
• Expand log source coverage, improve data quality, and troubleshoot complex platform issues.
• Establish standards for log onboarding and regularly assess SIEM health, visibility, and resilience.

Detection Development and Threat Intelligence

• Develop, maintain, and improve detection use cases aligned with the MITRE ATT&CK framework.
• Build custom detections for fintech-specific threats, including account takeover, payment fraud, and API abuse.
• Review and validate detection logic, identify false positives and coverage gaps, and improve detection quality.
• Conduct threat modeling and detection gap analysis to identify potential attack paths and strengthen monitoring coverage.

Team Leadership and Collaboration

The Senior Engineer will act as a key technical escalation point, mentor junior team members, and collaborate with internal stakeholders and external partners to enhance Tabby’s security posture.

Application Process

Candidates interested in this full-time position are encouraged to apply.