Senior Security Engineer II

About the role

We are seeking a Senior Security Engineer II to join Careem’s Security Engineering team. This hands‑on role focuses on cloud, infrastructure, edge, and emerging agentic AI security, driving initiatives from design through operation across a large‑scale, multi‑vertical tech environment.

Key responsibilities

• Own cloud security posture in AWS (EC2, EBS, IAM, GuardDuty, Bottlerocket, Beanstalk), enforce encryption‑by‑default, manage golden AMI pipelines and auto‑remediation.
• Build and maintain hardened golden images, oversee CVE patching pipelines and track fleet‑wide vulnerability remediation.
• Lead Kubernetes Security Posture Management (KSPM) and Cloud Security Posture Management (CSPM) controls, and handle incident response for infrastructure vulnerabilities.
• Manage SSL/TLS certificates, TLS version enforcement, bot traffic analysis and DDoS mitigation on Cloudflare.
• Run DDoS simulation tools (e.g., Kratos), integrate them into developer portals with authentication and audit workflows.
• Conduct security reviews for agentic AI systems, MCP servers and n8n automation workflows, publishing guidelines and building automated assessment tooling.
• Report security metrics and compliance status to executive and audit audiences.

Required profile

• 5+ years of experience in cloud security, infrastructure hardening, or related fields.
• Strong understanding of AWS services, Kubernetes security, and network security concepts.
• Hands‑on experience with security tooling, vulnerability management, and incident response.
• Ability to work independently, drive projects end‑to‑end and communicate with senior stakeholders.

Required skills

• AWS (EC2, EBS, IAM, GuardDuty, Bottlerocket, Beanstalk)
• Kubernetes security (KSPM)
• Cloudflare SSL/TLS and DDoS mitigation
• CVE patching and vulnerability remediation
• Automation tools for security assessments
• Agentic AI security concepts
• Infrastructure as Code pipelines for golden images
• OAuth/JWT authentication