Senior Insider Threat Detection Engineer

Grab; Indonesia; On-site; IDR 446,400,000 - 781,200,000; Full time

Job summary

Grab seeks a senior security engineer to design and operate insider threat detection across identity, endpoints, cloud, and data platforms. You will turn ambiguous threat signals into measurable detections, investigations, and preventive controls, reporting to the Lead of Insider Threat Detection.

This onsite role is based in Jakarta, Indonesia. You will collaborate with Security Engineering, Enterprise Security, IAM, Data Governance, Privacy, Legal, and AI teams to strengthen Grab's security

Qualifications

• At least 5 years of experience in cybersecurity engineering, detection engineering, threat hunting, or related fields.
• Proficiency in SQL and at least one scripting/query language (Python, KQL, or SPL).
• Strong understanding of identity, endpoint, cloud, SaaS, and enterprise data architectures.
• Experience investigating user activity across telemetry sources and producing evidence-based findings.
• Familiarity with SIEM, UEBA, DLP, CASB, EDR/XDR, IAM, and cloud-security platforms.
• Hands-on experience building detections with large-scale security data and anomaly detection.

Responsibilities

• Design, build and improve behavioural detections for data misuse, unusual access, excessive downloads, unauthorised data movement, credential misuse, privilege abuse, and attempts to bypass security controls.
• Lead complex technical investigations and proactive threat hunts, correlating identity, endpoint, network, cloud, SaaS, application, and data-access telemetry to reconstruct user activity and assess risk.
• Develop queries, scripts, data pipelines, risk-scoring models, and automation to improve telemetry enrichment, alert quality, case triage, investigation speed, and detection coverage.
• Partner with Identity and Access Management, Endpoint Security, Data Governance, and Enterprise Security teams to identify and address gaps across DLP, CASB, SIEM, UEBA, EDR/XDR, cloud, and data-protection controls.
• Develop detection scenarios for Generative AI, large language models, AI agents, and Shadow AI, including sensitive-data exposure, misuse of enterprise AI capabilities, and AI-assisted attempts to evade security controls.

Skills

Cybersecurity engineering

Threat hunting

Incident response

Insider threat

SQL

Python

KQL

SPL

UEBA

SIEM

DLP

IAM

EDR/XDR

Cloud security

AI security tools

Job description

Grab seeks a senior security engineer to design and operate insider threat detection across identity, endpoints, cloud, and data platforms. You will turn ambiguous threat signals into measurable detections, investigations, and preventive controls, reporting to the Lead of Insider Threat Detection.

This onsite role is based in Jakarta, Indonesia. You will collaborate with Security Engineering, Enterprise Security, IAM, Data Governance, Privacy, Legal, and AI teams to strengthen Grab's security