Senior Insider Threat Engineer

Security; Jakarta Utara; On-site; IDR 480,000,000 - 720,000,000; Full time

Job summary

Grab is seeking a senior security engineer to help build and operate insider threat detection and investigation capabilities across identity, endpoints, cloud services, and AI environments.

You will translate complex threat scenarios into scalable signals, detections, and investigation workflows, reporting to the Lead of Insider Threat Detection. The role is onsite in Jakarta and requires hands-on engineering leadership.

Qualifications

• Senior, hands-on engineering role.
• Turns complex threat scenarios into measurable signals and detections.
• Leads complex investigations and proactive threat hunts.

Responsibilities

• Design, build and improve behavioural detections for data misuse, unusual access, and privilege abuse.
• Lead complex investigations and proactive threat hunts across identity, endpoints, cloud, and data platforms.
• Develop queries, scripts, data pipelines, and risk-scoring models to improve telemetry and detection coverage.
• Partner with IAM, Endpoint Security, Data Governance, and Enterprise Security to close gaps across security controls.
• Develop detection scenarios for Generative AI and Shadow AI, including AI-enabled threats.

Skills

Threat detection

Security engineering

Data analytics

Scripting

Investigations

Cross-team collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM

UEBA

EDR/XDR

CASB

Data pipelines

Job description

The Insider Threat Management team is part of Cyber Defense. We protect Grab's people, data, systems, and customers from risks involving trusted users, compromised identities, data misuse, privilege abuse, and latest AI-enabled threats.

We are an evidence-led, engineering-focused team. We combine behavioural analytics, threat hunting, investigations, and security controls to detect meaningful risks early while respecting privacy, due process, and legitimate business activity.

You will work with Security Engineering, Enterprise Security, Identity and Access Management, Endpoint Security, Data Governance, Privacy, Legal, People, and AI teams across Grab.

Get to Know the Role

You will help build and operate Grab's insider threat detection and investigation capabilities across identity, endpoints, cloud services, SaaS applications, enterprise systems, data platforms, and AI environments.

This is a senior, hands-on engineering role. You will turn complex and sometimes ambiguous threat scenarios into measurable signals, scalable detections, investigation workflows, and preventive controls.

You will report to the Lead of Insider Threat Detection. This is an onsite role based in Jakarta.

The Critical Tasks You Will Perform

• You will design, build and improve behavioural detections for data misuse, unusual access, excessive downloads, unauthorised data movement, credential misuse, privilege abuse, and attempts to bypass security controls.
• You will lead complex technical investigations and proactive threat hunts, correlating identity, endpoint, network, cloud, SaaS, application, and data-access telemetry to reconstruct user activity and assess risk.
• You will develop queries, scripts, data pipelines, risk-scoring models, and automation to improve telemetry enrichment, alert quality, case triage, investigation speed, and detection coverage.
• You will partner with Identity and Access Management, Endpoint Security, Data Governance, and Enterprise Security teams to identify and address gaps across DLP, CASB, SIEM, UEBA, EDR/XDR, cloud, and data-protection controls.
• You will develop detection scenarios for Generative AI, large language models, AI agents, and Shadow AI, including sensitive-data exposure, misuse of enterprise AI capabilities, and AI-assisted attempts to evade security controls.