SiFi

SiFi is a Saudi-based fintech operating in a regulated space. Licensed as an Electronic Money Institution by the Saudi Central Bank (SAMA), the company builds and secures an all-in-one expense management platform for businesses across the MENA region. That regulatory footing means the threat model is real: they're handling corporate card issuance, business payment processing, employee reimbursements, and automated accounting workflows for over 3,500 businesses. The attack surface is broad, spanning transactional integrity, financial data confidentiality, and compliance-driven security controls mandated by SAMA. The platform integrates AI-powered financial insights into its core expense management stack. Technically, that means engineering teams work across fintech infrastructure, automated accounting pipelines, and the data models feeding those insights - all while maintaining the security posture expected of a licensed financial entity. The focus is Saudi Arabia, with expansion across the broader MENA region, so localization and regional compliance requirements shape how systems are built and deployed. For security practitioners, the draw is straightforward: you'd be defending financial infrastructure where the stakes aren't hypothetical. Payment rails, corporate card systems, and reimbursement flows are high-value targets, and the regulatory framework under SAMA adds external accountability on top of internal security standards.