Description
Grab is seeking a Senior Security Engineer to join the SecAID team in Petaling Jaya, Malaysia. The successful candidate will play a crucial role in shaping the company's security posture, influencing design decisions, and working closely with engineering teams to ensure secure development practices.
Responsibilities:
- Advocate for security integration into CI/CD pipelines across Grab's engineering teams
- Build security guardrails, standards, and developer-facing guidance
- Conduct application-layer security assessments and penetration testing
- Investigate Grab's environments for indicators of compromise and anomalous behavior
- Develop threat hunting hypotheses and apply them to Grab's specific technology landscape
- Mentor teammates and provide technical guidance
Requirements:
- 5+ years of experience in cybersecurity with an offensive security foundation
- Solid hands-on experience in application security, including API testing and OWASP Top 10
- Demonstrated experience integrating security into software development pipelines
- Strong software engineering knowledge to read code and review architecture diagrams
Nice to Have:
- Offensive security certifications such as OSCP or OSWE
- Familiarity with cloud-native architectures and container security
- Experience with MITRE ATT&CK and threat modeling frameworks
Benefits:
- Comprehensive medical insurance and term life insurance
- GrabFlex benefits package
- Parental and birthday leave
- Love-all-Serve-all (LASA) volunteering leave
- Confidential Grabber Assistance Programme