Lead Security Engineer, Red Team & Threat Intel

Grab; Jakarta Timur; Hybrid; IDR 1,254,255,509 - 1,612,614,226; Full time

Benefits offered by this job

Term Life Insurance

Medical Insurance

FlexWork arrangements

Job summary

Grab is looking for a skilled professional to join our Red Team & Threat Intel team in Jakarta or Kuala Lumpur. You will lead red team operations, develop offensive security tools, and enhance Grab's security posture across various environments, including cloud and CI/CD systems.

The ideal candidate has over 5 years of experience in offensive security, strong knowledge of AI tools, and the ability to translate security insights into practical improvements. Grab offers competitive benefits and fosters an inclusive workplace.

Qualifications

• 5+ years experience in offensive security, red teaming, or related roles.
• Hands-on experience with command-and-control tooling and automation.
• Strong knowledge of cloud environments and security architectures.

Responsibilities

• Lead end-to-end red team operations across varied environments.
• Develop offensive tooling and security simulations.
• Translate red team findings into actionable engineering improvements.

Skills

Offensive security

Red teaming

Cloud security

Command-and-control tooling

Threat intelligence

CI/CD system assessment

AI-enabled products assessment

Job description

About Grab and Our Workplace

Grab is Southeast Asia's leading superapp. From delivering meals to managing finances and getting around town, we support everything. Our purpose provokes joy and excellence while harnessing technology and AI to drive economic empowerment across the region.

Job Description

Join Grab's Red Team & Threat Intel team, focused on improving the security posture of Grab products and platforms across Southeast Asia. The team partners with Security, Engineering, Infrastructure, IT, and business units to emulate real-world adversaries, identify high‑impact risks, and help strengthen preventive, detective, and response capabilities.

Get to Know the Role

You will report to the Red Team & Threat Intel team leader and perform complex red team operations across cloud, CI/CD, endpoint, identity, application, and AI environments. You will design realistic attack simulations, develop offensive tooling, apply threat intelligence to Purple Team planning, and convert findings into practical improvements.

This role is based in Kuala Lumpur, Malaysia, or Jakarta, Indonesia. It involves shaping Grab's Red Team and Threat Intel capabilities and influencing AI and automation use to scale offensive security responsibly.

The Critical Tasks You Will Perform

• Lead end‑to‑end red team operations and intelligence‑led Purple Team exercises with the Blue Team across cloud infrastructure, CI/CD pipelines, identity systems, endpoints, and applications.
• Develop command‑and‑control tooling, implants, payload delivery mechanisms, and operator workflows for authorised security exercises.
• Red‑team AI systems, including internal copilots, agentic workflows, AI‑assisted operational tools, and MLOps environments.
• Use AI tools to improve research, automation, payload development, reporting, operational planning, and analysis of defensive coverage.
• Translate red‑team findings and threat intelligence into clear engineering actions and partner with defenders, platform teams, and the Vulnerability Management team to improve detection, response, hardening, security architecture, and risk prioritisation.
• Work with team members on offensive security tradecraft, tool development, operational safety, documentation, and responsible execution of adversary simulations.
• Contribute to the Red Team and Threat Intel roadmap, identifying the latest attack techniques and evaluating new tooling.
• Produce Threat Intel assessments from security incidents observed in the wild or internal improvement opportunities, and advise leadership on impact, priority, and next actions.

Qualifications

What Essential Skills You Will Need

• 5+ years of experience in offensive security, red teaming, security engineering, exploit development, cloud security, or related technical security roles.
• Hands‑on experience developing command‑and‑control tooling, implants, loaders, payloads, or offensive automation.
• Practical experience assessing CI/CD systems, source control platforms, build pipelines, artifact repositories, secrets handling, and deployment workflows.
• Strong knowledge of cloud environments, including identity, networking, logging, container platforms, and common privilege‑escalation paths.
• Experience assessing AI‑enabled products, internal AI platforms, or agentic systems in adversarial scenarios, and using AI tools to improve security research, workflows, and output quality.
• Experience producing or using Threat Intel to connect external incident trends, adversary tradecraft, and internal security signals to practical security decisions.
• Knowledge of major operating systems (Windows, Linux, macOS) and associated endpoint internals, enterprise management, and defensive controls is an added value.

Life at Grab

We care about your well‑being at Grab and offer global benefits, including:

• Term Life Insurance and comprehensive Medical Insurance.
• GrabFlex benefit package options.
• Parental and birthday leave plus volunteering leave (Love‑All‑Serve‑All).
• Confidential Grabber Assistance Programme.
• FlexWork arrangements, such as differentiated hours.

What We Stand For At Grab

We are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.