# Senior Security Engineer - Threat Detection

**Company**: Grab
**Location**: Petaling Jaya
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.smartrecruiters.com/Grab/744000140200692-senior-security-engineer-threat-detection?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_7df939c1-92f

## Description

Grab is seeking a Senior Security Engineer to join the SecAID team in Petaling Jaya, Malaysia. The successful candidate will play a crucial role in shaping the company's security posture, influencing design decisions, and working closely with engineering teams to ensure secure development practices.

**Responsibilities:**

- Advocate for security integration into CI/CD pipelines across Grab's engineering teams

- Build security guardrails, standards, and developer-facing guidance

- Conduct application-layer security assessments and penetration testing

- Investigate Grab's environments for indicators of compromise and anomalous behavior

- Develop threat hunting hypotheses and apply them to Grab's specific technology landscape

- Mentor teammates and provide technical guidance

**Requirements:**

- 5+ years of experience in cybersecurity with an offensive security foundation

- Solid hands-on experience in application security, including API testing and OWASP Top 10

- Demonstrated experience integrating security into software development pipelines

- Strong software engineering knowledge to read code and review architecture diagrams

**Nice to Have:**

- Offensive security certifications such as OSCP or OSWE

- Familiarity with cloud-native architectures and container security

- Experience with MITRE ATT&CK and threat modeling frameworks

**Benefits:**

- Comprehensive medical insurance and term life insurance

- GrabFlex benefits package

- Parental and birthday leave

- Love-all-Serve-all (LASA) volunteering leave

- Confidential Grabber Assistance Programme

## Skills

### Required
- offensive security
- application security
- CI/CD pipelines
- security assessments
- penetration testing
- threat hunting
- incident response

### Nice to have
- OSCP
- OSWE
- cloud-native architectures
- container security
- MITRE ATT&CK
- threat modeling frameworks

---

Source: [Apply at jobs.smartrecruiters.com](https://jobs.smartrecruiters.com/Grab/744000140200692-senior-security-engineer-threat-detection?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)