Senior Security Engineer: DevSecOps & Threat Detection

Grab; Petaling Jaya; On-site; MYR 220,000 - 360,000; Full time

Benefits offered by this job

Term Life Insurance & Medical Coverage

GrabFlex benefits package

Parental & Birthday leave

LASA volunteering leave

Grabber Assistance Programme

Job summary

Grab is seeking a Senior Security Engineer to join the SecAID team in Petaling Jaya, Malaysia. You will shape secure development practices, perform security assessments, and partner with engineering to raise the security bar across Grab's services.

Based onsite in Petaling Jaya, you will work with product and platform teams to embed security into the development lifecycle and drive secure coding standards across the org.

Qualifications

• 5+ years in cybersecurity with an offensive security foundation.
• Hands-on application security experience: API testing, auth flows, OWASP Top 10/ASVS.
• Experience integrating security into CI/CD pipelines with SAST/DAST/SCA or secrets scanning tools.
• Ability to read code and review architecture diagrams; conversant with developers.
• Experience conducting security design and specification reviews.

Responsibilities

• DevSecOps and Shift-Left Security: embed security gates early in development lifecycles.
• Security assessments and penetration testing: API/web/mobile surfaces and remediation guidance.
• Threat hunting and detection: investigate indicators and develop attack-informed hypotheses.
• Team and stakeholder enablement: mentor teammates and advise product teams.

Skills

Offensive security

Application security

CI/CD security tools

Code understanding

Security design reviews

Job description

Grab is seeking a Senior Security Engineer to join the SecAID team in Petaling Jaya, Malaysia. You will shape secure development practices, perform security assessments, and partner with engineering to raise the security bar across Grab's services.

Based onsite in Petaling Jaya, you will work with product and platform teams to embed security into the development lifecycle and drive secure coding standards across the org.