Description
Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything.
Join Grab's Red Team & Threat Intel team, which helps improve the security posture of Grab's products, platforms, cloud environments, AI systems, and enterprise technology across Southeast Asia. The team partners with Security, Engineering, Infrastructure, IT, and business teams.
You will report to the Red Team & Threat Intel team leader and perform complex red team operations across cloud, CI/CD, endpoint, identity, application, and AI environments. You will design realistic attack simulations, develop offensive tooling, apply threat intelligence to Purple Team planning, and turn findings into practical improvements for engineering and security teams.
The Critical Tasks You Will Perform:
- Manage end-to-end red team operations, and intelligence-led Purple Team exercises with the Blue Team.
- Develop command-and-control tooling, implants, payload delivery mechanisms, and operator workflows for authorised security exercises.
- Red team AI systems, including internal copilots, agentic workflows, AI-assisted operational tools, and MLOps environments.
- Use AI tools to improve research, automation, payload development, reporting, operational planning, and analysis of defensive coverage.
- Translate red team findings and threat intelligence into clear engineering actions.
- Work with other team members on offensive security tradecraft, tool development, operational safety, documentation, and responsible execution of adversary simulations.
- Contribute to the Red Team and Threat Intel roadmap.
- Produce Threat Intel assessments from security incidents observed in the wild or improvement opportunities identified internally.
QUALIFICATIONS:
- 4 or more years of experience in offensive security, red teaming, security engineering, exploit development, cloud security, or adjacent technical security roles.
- Hands-on experience developing command-and-control tooling, implants, loaders, payloads, or offensive automation.
- Practical experience assessing CI/CD systems, source control platforms, build pipelines, artefact repositories, secrets handling, and deployment workflows.
- Firm knowledge of cloud environments, including identity, networking, logging, container platforms, and common privilege escalation paths.
- Experience assessing AI-enabled products, internal AI platforms, or agentic systems in adversarial scenarios, and using AI tools to improve security research, workflows, and output quality.
Life at Grab:
- Term Life Insurance and comprehensive Medical Insurance.
- GrabFlex benefits package.
- Parental and Birthday leave.
- Love-all-Serve-all (LASA) volunteering leave.
- Confidential Grabber Assistance Programme.
- FlexWork arrangements.