Information Security Intern
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Tabby is offering a paid Information Security Internship for strong early-career engineers. Interns work on real security tasks in either VAPT or GRC tracks, embedded with the security team, with a clear path to a junior engineer role.
Key Skills for This Role
Responsibilities
- Triage findings from SAST, DAST, SCA, and dependency scanners across mobile and backend repos
- Reproduce and document vulnerabilities; write clear remediation tickets for product teams
- Contribute to secure code reviews on selected merge requests
- Participate in threat modelling sessions for new features and produce write ups
- Run scoped assessments against staging environments under senior sign off
- Help maintain security tooling: scanner configs, baseline rules, dashboards, false positive triage queues
- Help with security checks during release cycles
- Contribute to DevSecOps — security gates in CI/CD pipelines, dependency and container image scanning
- Exposure to logging, monitoring, and alert triage workflows alongside the SOC
- Participate in incident response exercises and post mortems alongside senior engineers
Requirements
- Solid understanding of information security fundamentals
- Understanding of HTTP, TLS, DNS, and TCP/IP fundamentals
- Understanding of authentication and authorization patterns (sessions, cookies, OAuth 2.0, JWT)
- Familiarity with Linux command line and POSIX like environments
- Ability to read technical material and explain it clearly in writing
- Experience with Git and standard development workflows
- Strong ethical mindset and discretion
- English sufficient for documentation and team communication
- Saudi nationals only
Full Job Posting
Description
- Tabby builds financial products used by millions of users across the GCC. We work on high load, security critical systems with strict regulatory requirements. The Information Security function protects Tabby across mobile apps, backend services, payment integrations, and cloud infrastructure.
- This internship is not educational by default. It is an engineering role with real responsibility.
- Information Security at Tabby covers two complementary tracks: VAPT and GRC.
- The internship is designed for strong early career engineers who want to grow as security practitioners.
Key Responsibilities
- Triage findings from SAST, DAST, SCA, and dependency scanners across mobile and backend repos.
- Reproduce and document vulnerabilities; write clear remediation tickets for product teams.
- Contribute to secure code reviews on selected merge requests (auth, input validation, data handling).
- Participate in threat modelling sessions for new features and produce write ups.
- Run scoped assessments against staging environments under senior sign off.
- Help maintain security tooling: scanner configs, baseline rules, dashboards, false positive triage queues.
- Help with security checks during release cycles.
- Contribute to DevSecOps — security gates in CI/CD pipelines, dependency and container image scanning.
- Exposure to logging, monitoring, and alert triage workflows alongside the SOC.
- Participate in incident response exercises and post mortems alongside senior engineers.
Skills, Knowledge & Expertise
- Solid understanding of information security fundamentals: confidentiality, integrity, availability; common attack categories (OWASP Top 10) and common control categories.
- Understanding of HTTP, TLS, DNS, and TCP/IP fundamentals.
- Understanding of authentication and authorization patterns (sessions, cookies, OAuth 2.0, JWT).
- Familiarity with Linux command line and POSIX like environments.
- Ability to read technical material and explain it clearly in writing.
- Experience with Git and standard development workflows.
- Strong ethical mindset and discretion.
- English sufficient for documentation and team communication.
Format
- Paid internship.
- Full integration into the Information Security team.
- Distributed engineering team across multiple countries.
- Open to Saudi nationals (Saudi passport required); location flexible.
- Office first in Riyadh where possible.
- Clear path to a junior Information Security engineer role based on performance.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Tabby
Vendor Manager
الرياض, KSA
Tabby is hiring a Vendor Risk Manager to own the third-party risk program end-to-end, from due diligence to offboarding. Requires 3-4 years in third-party risk management, knowledge of NIST CSF, ISO 27001, SOC 2, and str
Intern QA Engineer
Riyadh, KSA
Tabby is looking for an Intern QA Engineer to join their team in Riyadh. This is an engineering role with real responsibility, focusing on product quality across multiple systems. Interns will work on production tasks, i
Intern Backend (Go) Engineer
الرياض, KSA
Tabby offers a paid backend engineering internship for strong early-career engineers. Interns work on production code in Go, developing and maintaining backend services, APIs, and data storage for high-load financial sys
Finance Manager (Financial Control)
Riyadh, KSA
Tabby is looking for a Finance Manager to support finance operations for its Saudi Arabia entity, ensuring accurate financial reporting, regulatory compliance, and strong financial governance. The role oversees statutory
Intern QA Engineer
الرياض, KSA
Tabby is seeking an Intern QA Engineer to join their engineering team in Riyadh. This is a paid internship with real responsibility, focusing on product quality across multiple systems. Candidates should have programming
DevOps Intern
الرياض, KSA
Tabby offers a paid DevOps internship for strong early-career engineers in Riyadh. Interns work on production cloud infrastructure, Kubernetes, CI/CD, and observability with real responsibility and a path to a junior rol
DBA Intern
الرياض, KSA
Tabby offers a paid DBA internship for strong early-career engineers to work on production database systems including PostgreSQL. Interns will investigate slow queries, review schema changes, maintain backups, and suppor
Senior Tax Associate
Riyadh, KSA
Tabby is seeking a Senior Tax Associate to manage tax compliance, audits, and transfer pricing across KSA and the GCC region. The role requires 2-3 years of tax experience, strong knowledge of Saudi tax regulations, and
Vendor Manager
الرياض, KSA
Intern QA Engineer
Riyadh, KSA
Intern Backend (Go) Engineer
الرياض, KSA
Finance Manager (Financial Control)
Riyadh, KSA
Intern QA Engineer
الرياض, KSA
DevOps Intern
الرياض, KSA
DBA Intern
الرياض, KSA
Senior Tax Associate
Riyadh, KSA