Senior Insider Threat Engineer - Threat Detection & Hunting

GrabTaxi Holdings Pte. Ltd.; Jakarta Pusat; On-site; IDR 400,000,000 - 700,000,000; Full time

Benefits offered by this job

Term Life Insurance

Medical Insurance

GrabFlex

Parental leave

Birthday leave

LASA volunteering leave

Grabber Assistance Programme

FlexWork

Job summary

GrabTaxi Holdings Pte. Ltd. is seeking a senior cybersecurity engineer to build and operate insider threat detection and investigation capabilities across identity, endpoints, cloud, SaaS, and data platforms in Jakarta.

You will turn complex threat scenarios into measurable signals, scalable detections, and preventive controls. This hands-on role reports to the Lead of Insider Threat Detection and focuses on investigations, threat hunts, and cross-team collaboration to close gaps in DLP, IAM,

Qualifications

• 5+ years in cybersecurity engineering, detection engineering, or related fields.
• Proficiency in SQL and at least one programming or security-query language (Python/KQL/SPL).
• Understanding of identity, endpoint, cloud, SaaS, and data architectures with credential misuse paths.
• Experience investigating user activity across telemetry sources and producing evidence-based findings.
• Familiarity with SIEM, UEBA, DLP, CASB, EDR/XDR, IAM, and cloud security platforms.
• Hands-on experience building/tuning detections on large security datasets and risk scoring.
• Experience using AI tools to improve security workflows.

Responsibilities

• Design, build and improve behavioural detections for data misuse, unusual access, excessive downloads, unauthorised data movement, credential misuse, privilege abuse, and attempts to bypass security controls.
• Lead complex technical investigations and proactive threat hunts, correlating identity, endpoint, network, cloud, SaaS, application, and data-access telemetry to reconstruct user activity and assess risk.
• Develop queries, scripts, data pipelines, risk-scoring models, and automation to improve telemetry enrichment, alert quality, case triage, investigation speed, and detection coverage.
• Partner with Identity and Access Management, Endpoint Security, Data Governance, and Enterprise Security teams to identify and address gaps across DLP, CASB, SIEM, UEBA, EDR/XDR, cloud, and data-protection controls.
• Develop detection scenarios for Generative AI, large language models, AI agents, and Shadow AI, including sensitive-data exposure, misuse of enterprise AI capabilities, and AI-assisted attempts to evade security controls.

Skills

Cybersecurity engineering

Detection engineering

Threat hunting

Incident response

Insider threat

Enterprise data protection

Tools

SQL

Python

KQL

SPL

Job description

GrabTaxi Holdings Pte. Ltd. is seeking a senior cybersecurity engineer to build and operate insider threat detection and investigation capabilities across identity, endpoints, cloud, SaaS, and data platforms in Jakarta.

You will turn complex threat scenarios into measurable signals, scalable detections, and preventive controls. This hands-on role reports to the Lead of Insider Threat Detection and focuses on investigations, threat hunts, and cross-team collaboration to close gaps in DLP, IAM,