Careem

2 weeks ago

Senior Security Engineer II

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 23 hours agoStatus: Live

Job Summary

Drive hands-on cloud and infrastructure security across AWS and Kubernetes, owning posture, hardening, patching, and incident response. Manage edge and network protection via Cloudflare, including TLS health, bot/DDoS analysis, and root-cause fixes for security issues. Lead DDoS simulation and resilience testing, and perform security reviews for agentic AI systems, MCP servers, and automation workflows. Produce threat models, RFC/PRD security reviews, and IaC-based security automation.

Location: Karachi

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own and drive cloud security posture across AWS environments, including encryption-by-default, golden AMI pipelines, and auto-remediation frameworks.
•Build and maintain hardened golden images and manage CVE patching pipelines with fleet-wide vulnerability remediation health.
•Own KSPM and CSPM controls, and lead contingency planning and incident response for infrastructure-level vulnerabilities.
•Manage edge and network security in Cloudflare: TLS/certificate health, bot traffic analysis, DDoS pattern analysis, and mitigation for HackerOne-reported issues.
•Lead DDoS simulation/resilience testing, conduct infrastructure threat modeling and security reviews, and build IaC-based security automation including agentic AI/MCP security reviews.

Pay and Benefits

Schedule:4-Day Week

Perks:Health InsurancePaid LeaveGym Membership

Key Requirements

•8-10 years of hands-on security engineering experience in a cloud-native environment.
•Deep expertise in AWS security (IAM, GuardDuty, EBS encryption, EC2/Beanstalk hardening, Bottlerocket, Secrets Manager).
•Strong working knowledge of Kubernetes security (KSPM, container escape risks, runtime detection).
•Hands-on experience with Cloudflare (WAF, bot management, SSL/TLS, custom rules, traffic analytics).
•Proven track record owning vulnerability management programs (patching pipelines, SLA tracking, KPI reporting) and conducting security reviews/threat modeling.

Experience:8-10 yearsCloud-nativeAWS securityKubernetes securityCloudflareVulnerability management

Skills:High ownershipCross-functional collaborationCommunicationPresentationBuilder mindset

Languages:English

Tech Stack:AWSEC2EBSIAMGuardDutyBottlerocketBeanstalkSecrets ManagerKubernetesKSPMCSPMCloudflareSSL/TLSWAFBot managementDDoSKratosHackerOneMCPN8n

Company Brief

Careem

Careem is a Dubai-based super app offering ride-hailing, delivery, payments and other on-demand services across the Middle East, Pakistan and North Africa, connecting consumers with drivers, merchants and service providers.

Industry: Mobility Platforms

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Funding: Series E+

Headquarters: Dubai, United Arab Emirates

Founded: 2012

Glassdoor: 3.5

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Careem

2 weeks ago

Senior Security Engineer II

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 23 hours agoStatus: Live

Job Summary

Location: Karachi

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own and drive cloud security posture across AWS environments, including encryption-by-default, golden AMI pipelines, and auto-remediation frameworks.
•Build and maintain hardened golden images and manage CVE patching pipelines with fleet-wide vulnerability remediation health.
•Own KSPM and CSPM controls, and lead contingency planning and incident response for infrastructure-level vulnerabilities.
•Manage edge and network security in Cloudflare: TLS/certificate health, bot traffic analysis, DDoS pattern analysis, and mitigation for HackerOne-reported issues.
•Lead DDoS simulation/resilience testing, conduct infrastructure threat modeling and security reviews, and build IaC-based security automation including agentic AI/MCP security reviews.

Pay and Benefits

Schedule:4-Day Week

Perks:Health InsurancePaid LeaveGym Membership

Key Requirements

•8-10 years of hands-on security engineering experience in a cloud-native environment.
•Deep expertise in AWS security (IAM, GuardDuty, EBS encryption, EC2/Beanstalk hardening, Bottlerocket, Secrets Manager).
•Strong working knowledge of Kubernetes security (KSPM, container escape risks, runtime detection).
•Hands-on experience with Cloudflare (WAF, bot management, SSL/TLS, custom rules, traffic analytics).
•Proven track record owning vulnerability management programs (patching pipelines, SLA tracking, KPI reporting) and conducting security reviews/threat modeling.

Experience:8-10 yearsCloud-nativeAWS securityKubernetes securityCloudflareVulnerability management

Skills:High ownershipCross-functional collaborationCommunicationPresentationBuilder mindset

Languages:English

Tech Stack:AWSEC2EBSIAMGuardDutyBottlerocketBeanstalkSecrets ManagerKubernetesKSPMCSPMCloudflareSSL/TLSWAFBot managementDDoSKratosHackerOneMCPN8n

Company Brief

Careem

Industry: Mobility Platforms

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Funding: Series E+

Headquarters: Dubai, United Arab Emirates

Founded: 2012

Glassdoor: 3.5

Website LinkedIn Glassdoor