Senior Security Engineer, Cyber Defence Operations

Grab; Jakarta Pusat; On-site; IDR 400,000,000 - 800,000,000; Full time

Benefits offered by this job

Term Life Insurance

Medical Insurance

GrabFlex

Parental leave

Birthday leave

LASA volunteering leave

Grabber Assistance Programme

FlexWork hours

Job summary

Grab is seeking a Senior Security Engineer in Jakarta to lead our incident response and turn learnings into stronger detections, automation and AI-assisted workflows that shorten response times. You will be part of a 24/7 on-call rotation.

You will triage alerts from SIEM/EDR and perform forensics across cloud, network and host environments, while guiding detections, playbooks and automation. This role requires expertise in security operations and a proactive mindset.

Qualifications

• 5+ years in a Security Operations Centre, incident response or digital forensics role, including leading incident response.
• Hands-on SIEM and EDR experience (e.g., Splunk, Sentinel, CrowdStrike).
• Forensics skills across cloud (AWS preferred), network and host (Windows, Linux, macOS).
• Python scripting and security automation experience.
• Practical application of AI and LLM tools in security operations.
• Knowledge of MITRE ATT&CK and NIST Incident Response frameworks.
• Experience with SOAR platforms and playbook development.
• Mentoring or coaching experience.
• Certifications such as GCIH, GCFA or AWS security certifications.

Responsibilities

• Lead cybersecurity incidents: coordinate responders, guide containment and remediation, and lead post-incident reviews.
• Join a 24/7 on-call rotation.
• Triage security alerts from network, EDR and cloud sources, and handle escalations from complex cases.
• Run deep-dive forensics across cloud, network, host and application layers.
• Tune detections and hunt for threats using log and data analytics.
• Build automation (Python, SOAR playbooks) and lead the use of AI and agentic workflows in triage and response.

Skills

Incident response

SIEM/EDR

Forensics

Cloud security

Python scripting

AI in security

MITRE ATT&CK

SOAR

Mentoring

Certifications

Tools

Splunk

Sentinel

CrowdStrike

Job description

Get to Know the Team

You'll join Grab Cyber Defence, whose mission is to defend Grab and Grabbers from external and internal threat actors. We detect, hunt and respond to threats, rehearse our defences by emulating attackers, and share what we learn with stakeholders.

Get to Know the Role

As a Senior Security Engineer in Jakarta, you will report to the Senior Manager, Cyber Defence Operations. You lead our response to cybersecurity incidents and turn what we learn into better detections, automation and AI-assisted workflows that cut our time to respond. You will be part of our 24/7 on-call rotation.

The Critical Tasks You Will Perform

• Lead cybersecurity incidents: coordinate responders, guide containment and remediation, and lead post-incident reviews.
• Join a 24/7 on-call rotation.
• Triage security alerts from network, EDR and cloud sources, and handle escalations from complex cases.
• Run deep-dive forensics across cloud, network, host and application layers.
• Tune detections and hunt for threats using log and data analytics.
• Build automation (Python, SOAR playbooks) and lead the use of AI and agentic workflows in triage and response.

What Essential Skills You Will Need

• 5+ years in a Security Operations Centre, incident response or digital forensics role, including leading incident response.
• Hands‑on SIEM and EDR experience (for example Splunk, Sentinel, CrowdStrike).
• Forensics skills across cloud (AWS preferred), network and host (Windows, Linux, macOS) environments.
• Python scripting and security automation experience.
• Practical application of AI and LLM tools in security operations.
• Knowledge of MITRE ATT&CK and NIST Incident Response frameworks.
• Experience with SOAR platforms and playbook development.
• Mentoring or coaching experience.
• Certifications such as GCIH, GCFA or AWS security certifications.

Life at Grab

We care about your well-being at Grab, here are some of the global benefits we offer:

• We have your back with Term Life Insurance and comprehensive Medical Insurance.
• With GrabFlex, create a benefits package that suits your needs and aspirations.
• Celebrate moments that matter in life with loved ones through Parental and Birthday leave , and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
• We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.
• Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours

What We Stand For At Grab

We are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.