Lead Security Engineer, Red Team & Threat Intel

Grab; Petaling Jaya; On-site; MYR 120,000 - 160,000; Full time

Benefits offered by this job

Term Life Insurance

Comprehensive Medical Insurance

FlexBenefits package

Parental leave

FlexWork arrangements

Job summary

Grab is seeking a Red Team Operational Leader to execute complex red-team operations across various environments, including cloud and AI systems. Responsibilities include developing command-and-control tools and utilizing threat intelligence to enhance security measures.

The ideal candidate will have over 5 years of experience in offensive security and a strong background in security engineering. Grab fosters an inclusive workplace and offers various benefits including medical insurance and flexible work arrangements.

Qualifications

• 5+ years of experience in offensive security, red teaming, or security engineering.
• Hands-on development of command-and-control tooling and offensive automation.
• Experience assessing CI/CD systems and deployment workflows.

Responsibilities

• Lead red-team operations and Purple Team exercises across environments.
• Develop operational workflows for authorized security exercises.
• Translate findings into actionable engineering improvements.

Skills

Offensive security expertise

Command-and-control tooling

Security engineering

AI-enabled product assessment

Threat intelligence application

Tools

Red-team automation tools

CI/CD systems

Cloud environments

Job description

About Grab

Grab is Southeast Asia's leading superapp, delivering everything from meals to finance and transportation solutions. Leveraging technology and AI, Grab empowers communities, driving economic progress and fostering a culture of excellence and humility.

Get to Know the Team

The Red Team & Threat Intelligence group strengthens Grab’s security by emulating real-world adversaries, identifying high-impact risks, and guiding preventive, detective, and response strategies across products, platforms, cloud environments, AI systems, and enterprise technology.

Get to Know the Role

Reporting to the Red Team & Threat Intelligence team leader, you will execute complex red‑team operations across cloud, CI/CD, endpoint, identity, application, and AI environments. You will design realistic attack simulations, build offensive tooling, leverage threat intelligence for Purple Team exercises, and translate findings into actionable improvements for engineering and security teams. Based in Kuala Lumpur, Malaysia or Jakarta, Indonesia, you will help shape regional capabilities and influence the responsible use of AI and automation to scale offensive security.

Critical Tasks You Will Perform

• Lead end‑to‑end red‑team operations and intelligence‑led Purple Team exercises across multiple environments.
• Develop command‑and‑control tooling, implants, payload delivery mechanisms, and operator workflows for authorised security exercises.
• Red‑team AI systems, including internal copilots, agentic workflows, and MLOps environments.
• Use AI tools to improve research, automation, payload development, reporting, and defensive coverage analysis.
• Translate red‑team findings and threat intel into clear engineering actions, partnering with defenders, platform teams, and vulnerability management.
• Collaborate on offensive security tradecraft, tool development, operational safety, documentation, and responsible execution.
• Contribute to the Red Team and Threat Intelligence roadmap, evaluating new tools and attack techniques.
• Produce threat intel assessments from wild incidents or internal opportunities and advise leadership on impact and next actions.

Essential Qualifications

• 5+ years of experience in offensive security, red teaming, security engineering, or a related technical security role.
• Hands‑on experience developing command‑and‑control tooling, implants, loaders, payloads, or offensive automation.
• Practical experience assessing CI/CD systems, source control platforms, build pipelines, artifact repositories, secrets handling, and deployment workflows.
• Firm knowledge of cloud environments, including identity, networking, logging, container platforms, and privilege escalation paths.
• Experience assessing AI‑enabled products or internal AI platforms in adversarial scenarios, and using AI tools to enhance security research and workflows.
• Experience using threat intel to link external incident trends, adversary tradecraft, and internal signals to practical security decisions.
• Knowledge of Windows, Linux, and macOS operating systems, endpoint internals, enterprise management, and defensive controls is an added value.

Life at Grab

• Term Life Insurance and comprehensive Medical Insurance.
• FlexBenefits package tailored to individual needs.
• Parental, birthday, and volunteering leave.
• Grabber Assistance Programme for personal and family challenges.
• FlexWork arrangements and differentiated hours.

What We Stand For

We are committed to building an inclusive and equitable workplace, ensuring equal opportunity for all candidates regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments, disabilities, or any other unique attributes.

Grab is an equal opportunity employer. All qualified applicants will receive consideration for employment without discrimination.