Tabby

2 weeks ago

Information Security Intern

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 23 hours agoStatus: Live

Job Summary

Join Tabby’s Information Security team in a demanding, production-focused internship where you’ll work under senior review. Choose a VAPT track to triage SAST/DAST/SCA findings, document vulnerabilities, and help run secure assessments and DevSecOps security gates. Or join the GRC track supporting PCI DSS, ISO 27001, and SAMA compliance with evidence, control mapping, risk assessments, vendor reviews, and audit preparation. Office-first in Riyadh when possible.

Location: Riyadh

Workplace: Onsite

Employment Type: Internship

Job Function: Cybersecurity

Seniority: Intern level

Key Responsibilities

•Triage security findings from SAST, DAST, SCA, and dependency scanners across mobile and backend repositories.
•Reproduce and document vulnerabilities and write clear remediation tickets for product teams.
•Contribute to secure code reviews on selected merge requests (auth, input validation, data handling).
•Support compliance programs and evidence collection for frameworks like PCI DSS, ISO 27001, and SAMA (control mapping and gap analysis).
•Contribute to risk assessments and help prepare for internal and external audits, including evidence packages and response coordination.

Pay and Benefits

Perks:Paid Internship

Key Requirements

•Solid understanding of information security fundamentals (confidentiality, integrity, availability), common attack categories (OWASP Top 10), and control categories.
•Understanding of HTTP, TLS, DNS, and TCP/IP fundamentals.
•Understanding of authentication and authorization patterns (sessions, cookies, OAuth 2.0, JWT).
•Familiarity with Linux command line and POSIX-like environments.
•Experience with Git and the ability to read technical material and explain it clearly in writing.

Skills:Ethical mindsetDiscretionOpen to feedbackTechnical writingDocumentation

Certifications:OSCPCEHSecurity+CISACISMCRISC

Languages:English

Tech Stack:OWASP Top 10HTTPTLSDNSTCP/IPAuthenticationAuthorizationOAuth 2.0JWTLinuxPOSIXGitSASTDASTSCADependency scannersMobile app securityIOSAndroidCertificate pinning

Eligibility

Nationality:Saudi National

Company Brief

Tabby

Tabby is a MENA buy‑now‑pay‑later and fintech platform that enables customers to split purchases into installments, offers in‑store and online payment products, a consumer app, and merchant services across Saudi Arabia, UAE, Kuwait and the wider region.

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Riyadh, Saudi Arabia

Founded: 2019

Glassdoor: 4.0

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Tabby

2 weeks ago

Information Security Intern

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 23 hours agoStatus: Live

Job Summary

Location: Riyadh

Workplace: Onsite

Employment Type: Internship

Job Function: Cybersecurity

Seniority: Intern level

Key Responsibilities

•Triage security findings from SAST, DAST, SCA, and dependency scanners across mobile and backend repositories.
•Reproduce and document vulnerabilities and write clear remediation tickets for product teams.
•Contribute to secure code reviews on selected merge requests (auth, input validation, data handling).
•Support compliance programs and evidence collection for frameworks like PCI DSS, ISO 27001, and SAMA (control mapping and gap analysis).
•Contribute to risk assessments and help prepare for internal and external audits, including evidence packages and response coordination.

Pay and Benefits

Perks:Paid Internship

Key Requirements

•Solid understanding of information security fundamentals (confidentiality, integrity, availability), common attack categories (OWASP Top 10), and control categories.
•Understanding of HTTP, TLS, DNS, and TCP/IP fundamentals.
•Understanding of authentication and authorization patterns (sessions, cookies, OAuth 2.0, JWT).
•Familiarity with Linux command line and POSIX-like environments.
•Experience with Git and the ability to read technical material and explain it clearly in writing.

Skills:Ethical mindsetDiscretionOpen to feedbackTechnical writingDocumentation

Certifications:OSCPCEHSecurity+CISACISMCRISC

Languages:English

Tech Stack:OWASP Top 10HTTPTLSDNSTCP/IPAuthenticationAuthorizationOAuth 2.0JWTLinuxPOSIXGitSASTDASTSCADependency scannersMobile app securityIOSAndroidCertificate pinning

Eligibility

Nationality:Saudi National

Company Brief

Tabby

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Riyadh, Saudi Arabia

Founded: 2019

Glassdoor: 4.0

Website LinkedIn Glassdoor