Cloud Security Lead

Job Summary

Careem is looking for a Cloud Security Lead to take ownership of our cloud security programs and activities and provide hands-on technical engineering Careem.

You will work closely with our Engineering and Product Management groups to help build secure and robust systems responsible for serving our customers and colleagues. You will have the opportunity to learn from, and be mentored by, those who are building and securing our cutting-edge services. Other responsibilities include:

• Serves as the subject matter expert (SME) on Cloud Security for Careem
• Develops standards, policies and procedures as well as best practices documentation.
• Participate in efforts that tailor the company’s security policies and standards for use in cloud environments
• Translate security and technical requirements into business requirements, and communicate security risks to different audiences ranging from business leaders to engineers.
• Design and implement a comprehensive cloud security strategy to to improve our cloud security posture
• Inform and oversee the development and execution of a comprehensive strategy for Cloud Security
• Partner cross-functionally with key business partners to influence and ensure alignment and support for the IT Architecture, IT Engineering and IT operations mandate
• Align and collaborate with fellow leaders of our Engineering, Fusion Center Operations and Risk on a strategy to support their functions with technical solutions and expertise
• Research, evaluate, and recommend security technologies that can be applied to technology solutions being developed or maintained internally or externally
• Establish team for automation
• Some travel required for work with the leadership team, possibly for customer briefings, planning and other activities
• Drive and mentor our Cloud Security engineers

What you’ll need

• BS in Computer Science or related field, or equivalent work experience
• Cloud security certifications are a plus
• Minimum of 5-8 years of experience with cloud and security engineering, system and network security, authentication and security protocols, cryptography, or application security.
• Minimum of 4 years of experience with any combination of the following: cloud security, threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security.
• Good knowledge of DevSecOps practices/tools for the AWS Cloud instances and their integration & implementation.
• Experience in setting up an SSDLC processes across an mid-sized organization
• Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, Rust, etc.)
• Expert knowledge in securing and operationalizing AWS cloud technologies including but not limited to ECS, S3, ALB, RDS, DMS, KMS, Secrets Manager, Config, CloudWatch, Lambda, SNS, SQS
• Familiarity with establishing security in CI/CD pipeline to create and deploy artifacts to the AWS Cloud VPCs.
• Minimum of 3-5 years of experience working in AWS Cloud security implementation, migration and operations.
• Familiarity with SRE and it’s relevance to securing Cloud instances
• Ability to construct cloud security infrastructure using Infrastructure as Code
• Experience in migration of on-prem enterprise system to AWS cloud
• Knowledge of and experience securing container, Microservices and API technologies

Where you’ll be

• Even though we are working remotely, we are strong believers in collaboration and the power of building social connections with our teams. For that reason, our offices are still open and provide plenty of collaboration-friendly spaces at times when teams need it or if you need a quiet space to work outside of home.
• You’ll be working in the location you’re hired from. Due to legal and compensation considerations, you will need to be based out of the country you’re hired from as your primary work location.