Staff Security Engineer II

Key Responsibilities

Design

• You will be responsible for designing an innovative security architecture for the distributed backend system that the engineering organization is building to meet the challenging functional, scalability and reliability requirements for our fast growing business. Your responsibility includes ensuring that the end-to-end architecture design meets the best practices around cyber security, compliance, regulation, and privacy.

Engineering

• You will be a trusted technical advisor to solve complex information security challenges. Provide guidance to engineers who work on complex technical security matters and designs impacting all the domains under Careem. You will keep raising the technical bar at Careem and ensuring that we build secure, scalable, and business-enabling solutions.

Team Support & Growth

• Facilitate collaboration between InfoSec teams and other architects, engineers, business owners, and technical program managers to solve interesting and challenging infosec problems across our platform and services. You will help lead the security architecture documentation, code review process, and continuously strive for higher quality and productivity.

Tech Leadership

• You will work with different stakeholders at a senior level and engage proactively with all Careem engineering and product leads in different domains to ensure information security is at the top of mind across the teams.

What you’ll need

• Minimum of 5 years of advanced / expert level experience with any combination of the following: threat modeling experience, cloud security, system security, secure coding, identity management and authentication, software development, cryptography, system administration, and network security.
• Excellent knowledge of DevSecOps practices and technologies
• Deep understanding of AWS security capabilities and features and expert knowledge in securing and operationalizing AWS cloud technologies
• Hands on experience in SSDLC processes across a fast growth tech organization
• Experience with multiple programming languages
• Familiarity with SRE, logging and monitoring, and system engineering best practices
• Knowledge of and experience securing container, Microservices, and API technologies
• Strong problem solving, oral and written communication skills
• Strong understanding of software development methodologies
• Holder of industry professional certifications in AWS cloud architecture and development is strongly preferred
• Hands-on knowledge of information security technologies
• Ability to make concrete progress in the face of ambiguity and imperfect knowledge
• A strong bias for action with proven ability to handle high stress, time sensitive security tasks
• Strong information security risk-based prioritization abilities
• Excellent written and verbal communication skills
• Proven knowledge of system architecture.
• Experience in multi-tiered distributed systems, web services, APIs, and relational & NoSQL databases.

Preferred Skills and Qualification

• Bachelors or higher in Computer Science or equivalent discipline.
• 10+ years of experience in information security engineering.
• Cloud security certifications are a plus.
• Excellent communication skills.
• Ability to juggle multiple projects at the same time.
• Able to take individual ownership of a project from start to finish.

What we’ll provide you

• Work and learn from great minds.
• Put your passion to work in a purposeful organisation.
• Explore new opportunities to learn and grow every day.
• Work 4 days a week in office & 1 day from home.
• Remotely from any country in the world for 30 days a year with unlimited vacation days per year.
• Access to healthcare benefits and fitness reimbursements.