Senior Security Engineer II — Cloud & AI Security Leader

Careem; Karachi Division; Hybrid; PKR 1,800,000 - 3,600,000; Full time

Benefits offered by this job

Healthcare benefits

Remote work 30 days/year

Unlimited vacation

Job summary

Careem is seeking a Senior Security Engineer II to own cloud and edge security across AWS, CSPM/KSPM, and agentic AI deployments. This hands-on role includes building hardened images, managing vulnerability pipelines, and leading incident response with cross-functional teams.

You will work on DDoS resilience, CDN configurations, and security automation across multiple verticals, driving secure-by-design practices with strong communication across the organization.

Qualifications

• 8-10 years of hands-on security engineering in cloud-native environments.
• Deep AWS security expertise (IAM, GuardDuty, EBS encryption, EC2/Beanstalk hardening).
• Strong knowledge of Kubernetes security (KSPM, container escape risks, runtime detection).
• Hands-on with Cloudflare (WAF, bot management, SSL/TLS, custom rules).
• Proven ability to own vulnerability management programs and patching pipelines.
• Experience with DDoS simulation/resilience testing and cross-functional coordination with SRE/QA.
• Familiarity with agentic AI, MCP servers, n8n workflows; OAuth/JWT flows, SSRF risks.

Responsibilities

• Own cloud security posture across AWS environments; enforce encryption-by-default and golden AMI pipelines.
• Build and maintain hardened golden images; manage patching pipelines and remediation health.
• Lead KSPM and CSPM controls; plan contingencies and incident response for infra vulnerabilities.
• Report on server hardening KPIs, vulnerability patching health, and network security controls.
• Manage SSL/TLS health, TLS version enforcement, and bot traffic analysis.
• Investigate CDN misconfigurations and drive root-cause analysis for issues.
• Lead DDoS simulation tooling and integrate platforms into developer portals.
• Review agentic AI security, tool usage, and OAuth/JWT workflows; publish guidelines.
• Conduct threat modeling and security assessment across product verticals; RFCs & code reviews.
• Contribute to IaC baselining; build auto-remediation proofs-of-concept.

Skills

Cloud security (AWS)

Kubernetes security

DDoS security & tooling

Edge & Network security

Agentic AI security

Security reviews & threat modeling

Security automation

Strong communication

Cross-functional collaboration

Tools

Terraform/CDK

CrowdStrike

Snyk/SonarQube

Cloudflare WAF & TLS

Job description

Careem is seeking a Senior Security Engineer II to own cloud and edge security across AWS, CSPM/KSPM, and agentic AI deployments. This hands-on role includes building hardened images, managing vulnerability pipelines, and leading incident response with cross-functional teams.

You will work on DDoS resilience, CDN configurations, and security automation across multiple verticals, driving secure-by-design practices with strong communication across the organization.