About this role
Careem is building the Everything App for the greater Middle East — making it easy to move around, order food and groceries, manage payments, and more. Our purpose is simple: to simplify and improve people’s lives and build an awesome organisation that inspires. Since 2012, Careem has enabled earnings for over 2.5 million Captains, simplified the lives of more than 70 million customers, and built a platform where the region’s best talent and entrepreneurs thrive. We operate in 70+ cities across 10 countries, from Morocco to Pakistan.
We’re now entering our next chapter — one powered by AI. We’re looking for AI talent: curious problem-solvers who know how to apply AI to build tools, automate workflows, and create real impact. Whether it’s streamlining operations, enhancing customer experience, or reimagining internal systems — we want people who can make Careem work smarter and move faster.
About the Role
We are looking for a Senior Security Engineer II to join our Security Engineering team. This is a hands-on, high-ownership role for someone who thrives at the intersection of cloud security, infrastructure hardening, and agentic/AI security. You'll be expected to independently drive security initiatives across a large-scale, multi-vertical tech organization - not just advise, but build, ship, and operate.
What You'll Do
Cloud & Infrastructure Security
• Own and drive cloud security posture across AWS environments (EC2, EBS, IAM, GuardDuty, Bottlerocket, Beanstalk) including enforcement of encryption-by-default, golden AMI pipelines, and auto-remediation frameworks.
• Build and maintain hardened golden images; manage CVE patching pipelines and track fleet-wide vulnerability remediation health.
• Own KSPM (Kubernetes Security Posture Management) and CSPM controls; lead contingency planning and incident response for infrastructure-level vulnerabilities.
• Report on server hardening KPIs, vulnerability patching health, and compliant network security controls for executive/compliance audiences.
Edge & Network Security (Cloudflare)
• Manage SSL/TLS certificate health, TLS version enforcement, and bot traffic analysis across production domains.
• Analyze and respond to anomalies, bot vs human traffic breakdowns, DDoS patterns, firewall rule tuning.
• Investigate CDN misconfigurations and drive root-cause analysis and mitigation for HackerOne-reported issues.
DDoS Simulation & Resilience Testing
• Lead and operate DDoS simulation tooling (e.g., Kratos) across business verticals in collaboration with QA and SRE teams.
• Integrate simulation platforms into internal developer portals with built-in auth, audit workflows, and approval controls.
Agentic AI & MCP Security
• Conduct security reviews for agentic AI systems, MCP servers, and n8n automation workflows covering agent permissions, tool usage, OAuth/JWT auth, and SSRF/injection risks.
• Publish security guidelines for agentic AI deployments