Application Security Engineer II

Job Description

At Careem we are led by a powerful purpose to simplify and improve lives in the Middle East, North Africa and Pakistan. Were pioneering the development of innovative services to aid the mobility of people, the mobility of things and the mobility of money.Were in the driving seat as we help to define how technology will shape progress in some of the fastest-growing countries in the world. Our teams are building tech to meet the needs of the future in areas including data and AI, e-commerce, technology-enabled logistics, maps, identity, and fintech.We?re well placed to solve complex and meaningful challenges at scale, with deep tech expertise, strong regulatory relationships, a local presence, and increasingly specialised global teams which are structured to operate as autonomous start-ups. Our team of over 400 engineers and developers are empowered to develop cutting-edge technology every day.Careem was established in July 2012, became a wholly-owned subsidiary of Uber Technologies, Inc. in January 2020, and today operates in over 100 cities across 12 countries.About the roleCareem is looking for an AppSec Engineer who can demonstrate SME expertise in Application Security Domain knowledge and experience. The individual will work closely with stakeholders across the Org (that include Business, Engineering teams and Product Management). This individual must have good communication skills so that they are able to influence the various stakeholders to: build and sustain a secure and robust system(s), provide guidance, and ensure application security is embedded across Careem Tech to secure our captains, customers and colleagues.The role expectations are to help validate that our services, applications, and websites are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios.You will have the opportunity to learn from and be mentored by those who are building and securing our cutting-edge services.What youll do

• Act as a SME on Application Security and help technology stakeholders in implementing secure coding best practices
• Ensure vulnerabilities mitigation
• Evaluate and implement relevant technologies for DevSecOps
• Partner with business and technology stakeholders to implement security best practices within our development process

What youll need

• BS in Computer Science or related field, or equivalent work experience
• Certifications such as OSCP, OSCE, OSWP are a plus.
• Minimum of 5-8 years of experience with application security engineering,
• Familiarity with common security libraries, security controls, and common security flaws.
• Development, engineering and scripting experience and skills.
• Experience with OWASP, static/dynamic analysis, and common security tools.
• Minimum of 4 years of experience with any combination of the following: application security, threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security

Where youll be

• This role is part of a remote distributed team! This means you can be based in any of the countries where we currently have an engineering site. If you would like to join us in Dubai, Berlin, Ukraine, Russia, Poland, Pakistan, Egypt, Lebanon or Jordan, thats fine with us (Visa permitting)!
• Even though we are working remotely, we are strong believers in collaboration and the power of building social connections with our teams. For that reason, our offices are still open and provide plenty of collaboration-friendly spaces at times when teams need it or if you need a quiet space to work outside of home.
• You?ll be working in the location you?re hired from. Due to legal and compensation considerations, you will need to be based out of the country you?re hired from as your primary work location.

What well provide youIn addition to a competitive long-term total compensation with salary and equity, we have a reward philosophy that expands beyond this.As a Careem colleague you will be able to:

• Be part of a Remote-First organisation
• Work from any country in the world for 60 days a year
• Use Unlimited Vacation days throughout the year
• Access fitness reimbursements for health activities including: gym, health club and training classes.
• Work and learn from great minds
• Create impact in a region with untapped potential
• Explore new opportunities to learn and grow every day

Keyskills :