Senior AI-Driven Security Engineer

Gelato; Lahore; On-site; PKR 2,500,000 - 6,000,000; Full time

Job summary

Gelato is seeking an experienced Security Engineer to build AI-driven agents and automation that review engineering output and ensure secure deployments. You will bridge information security and engineering, working across application security, cloud, and identity, with a focus on scalable secure-by-design practices.

You don’t need to be an expert in all areas; strong in several and eager to grow is ideal. Collaboration with a small security team and ongoing risk-based improvements are core to

Qualifications

• 5+ years in security engineering, AppSec, cloud security or incident response.
• Hands-on experience building with LLMs and AI agents is a hard requirement.
• Experience securing major public clouds (AWS preferred) and Kubernetes.
• Solid foundations in app security, secure SDLC and incident response.
• Production-quality code in Python, Go or TypeScript; automation mindset.

Responsibilities

• Automate with AI: build agents for code review, alert triage and investigation summaries.
• Secure the SDLC: own SAST, SCA, secrets, container and IaC scanning; drive secure defaults.
• Secure Cloud and Identity: manage IAM, least-privilege access and policy enforcement.
• Detect and Respond: run SIEM monitoring, lead incidents end-to-end, write playbooks.
• Partner with Engineering: explain risk with clear, actionable fixes.

Skills

AI security

Cloud security

Incident response

Python

Go

TypeScript

IAM fundamentals

Kubernetes

CI/CD

Tools

AWS

IaC

Kubernetes

CI/CD tooling

Job description

Gelato is seeking an experienced Security Engineer to build AI-driven agents and automation that review engineering output and ensure secure deployments. You will bridge information security and engineering, working across application security, cloud, and identity, with a focus on scalable secure-by-design practices.

You don’t need to be an expert in all areas; strong in several and eager to grow is ideal. Collaboration with a small security team and ongoing risk-based improvements are core to