Offer summary

Qualifications:

Minimum 10 years of experience in cybersecurity., At least 5 years focused on detection engineering, incident response, or SOC automation., Deep understanding of attacker TTPs, network, endpoint telemetry, and log analytics., Proven experience in architecting SOAR or XDR solutions and automations..

Key responsibilities:

Design and own the AI-powered detection and response architecture.

Research and prototype automated detections using complex security data.

Develop playbooks and workflows for automated threat triage and response.

Partner with SOC to deploy threat hunts, behavior analytics, and manage major incidents.

Job description

Careem is building the Everything App for the greater Middle East, making it easier than ever to move around, order food and groceries, manage payments, and more. Careem is led by a powerful purpose to simplify and improve the lives of people and build an awesome organisation that inspires. Since 2012, Careem has created earnings for over 2.5 million Captains, simplified the lives of over 70 million customers, and built a platform for the region’s best talent to thrive and for entrepreneurs to scale their businesses. Careem operates in over 70 cities across 10 countries, from Morocco to Pakistan.

We are looking for a senior-level security architect who can help modernise our detection-and-response stack by embedding automation, advanced analytics, and Generative AI. You will design end-to-end architecture, spanning data pipelines, correlation engines, SOAR playbooks, LLM-powered assistants, and autonomous agents to cut analyst toil, accelerate mean-time-to-detect (MTTD) and mean-time-to-respond (MTTR), and raise overall cyber-resilience.

What you'll do

Strategy & Architecture

Own the technical roadmap for AI-powered detection & response across SIEM, XDR, etc.
Map requirements to frameworks such as MITRE ATT&CK / D3FEND, NIST, CIS controls and ISO27001

Detection Engineering

Research, prioritise, and prototype new detections that can be automated at scale, turning complex security data into high-fidelity signals.

Automation & Orchestration

Design playbooks and agent workflows that auto-triage, contain, and remediate validated threats.

Generative AI & ML

Build and tune LLM-based assistants (prompt/chain engineering, RAG, vector search) to summarise alerts, enrich context, and recommend response actions

Data & Telemetry

Architect scalable pipelines to ingest, transform, and store multi-petabyte security telemetry for real-time analytics

Threat Hunting & Incident Response

Partner with SOC to codify hunts, deploy behaviour analytics, and oversee major incidents, acting as Tier-3 escalation

Governance & Risk

Ensure AI/automation solutions meet legal, privacy, and audit requirements; define human-in-the-loop guardrails and policy enforcement

Evangelism & Mentorship

Champion a culture of automation; coach engineers and analysts on secure coding, ML safety, and threat-informed defence

What you’ll need

10+ years in cybersecurity with 5+ years focused on detection engineering, incident response, or SOC automation in large-scale environments.
Deep understanding of attacker TTPs, network & endpoint telemetry, and log analytics
Proven experience architecting SOAR or XDR solutions and shipping production-grade automations in Python, Go, or similar.
Hands-on with cloud platforms (AWS or Azure or GCP) security services
Strong ML/AI expertise, data science workflow, vector DBs, model fine-tuning; familiarity with GenAI ecosystem (OpenAI, Gemini, Llama, etc.).
Ability to translate business risk into technical requirements and influence senior stakeholders.
Excellent communication and mentorship skills

Nice-to-Have

Experience deploying agent-based GenAI frameworks that autonomously execute detection–investigation–response loops
Certifications: CISSP, GIAC (GXPN, GDAT, GCTI), GCPN, or OCSP.
Familiarity with Infrastructure-as-Code (Terraform, CDK) and DevSecOps pipelines.
Background in regulatory environments (PCI-DSS, GDPR, HIPAA, UAE NESA, etc.).

What we’ll provide you

We offer colleagues the opportunity to drive impact in the region while they learn and grow. As a full time Careem colleague, you will be able to:

Work and learn from great minds by joining a community of inspiring colleagues.
Put your passion to work in a purposeful organisation dedicated to creating impact in a region with a lot of untapped potential.
Explore new opportunities to learn and grow every day.
Work 4 days a week in office & 1 day from home, and remotely from any country in the world for 30 days a year with unlimited vacation days per year. (If you are in an individual contributor role in tech, you will have 2 office days a week and 3 to work from home.)
Access to healthcare benefits and fitness reimbursements for health activities including gym, health club, and training classes.

Required profile