Senior Security Engineer: 24/7 Incident Response & AI Automation

Grab; Jakarta Pusat; On-site; IDR 400,000,000 - 800,000,000; Full time

Benefits offered by this job

Term Life Insurance

Medical Insurance

GrabFlex

Parental leave

Birthday leave

LASA volunteering leave

Grabber Assistance Programme

FlexWork hours

Job summary

Grab is seeking a Senior Security Engineer in Jakarta to lead our incident response and turn learnings into stronger detections, automation and AI-assisted workflows that shorten response times. You will be part of a 24/7 on-call rotation.

You will triage alerts from SIEM/EDR and perform forensics across cloud, network and host environments, while guiding detections, playbooks and automation. This role requires expertise in security operations and a proactive mindset.

Qualifications

• 5+ years in a Security Operations Centre, incident response or digital forensics role, including leading incident response.
• Hands-on SIEM and EDR experience (e.g., Splunk, Sentinel, CrowdStrike).
• Forensics skills across cloud (AWS preferred), network and host (Windows, Linux, macOS).
• Python scripting and security automation experience.
• Practical application of AI and LLM tools in security operations.
• Knowledge of MITRE ATT&CK and NIST Incident Response frameworks.
• Experience with SOAR platforms and playbook development.
• Mentoring or coaching experience.
• Certifications such as GCIH, GCFA or AWS security certifications.

Responsibilities

• Lead cybersecurity incidents: coordinate responders, guide containment and remediation, and lead post-incident reviews.
• Join a 24/7 on-call rotation.
• Triage security alerts from network, EDR and cloud sources, and handle escalations from complex cases.
• Run deep-dive forensics across cloud, network, host and application layers.
• Tune detections and hunt for threats using log and data analytics.
• Build automation (Python, SOAR playbooks) and lead the use of AI and agentic workflows in triage and response.

Skills

Incident response

SIEM/EDR

Forensics

Cloud security

Python scripting

AI in security

MITRE ATT&CK

SOAR

Mentoring

Certifications

Tools

Splunk

Sentinel

CrowdStrike

Job description

Grab is seeking a Senior Security Engineer in Jakarta to lead our incident response and turn learnings into stronger detections, automation and AI-assisted workflows that shorten response times. You will be part of a 24/7 on-call rotation.

You will triage alerts from SIEM/EDR and perform forensics across cloud, network and host environments, while guiding detections, playbooks and automation. This role requires expertise in security operations and a proactive mindset.