{"id":586690,"url":"https://alion.io/job/grab-senior-insider-threat-engineer","title":"Senior Insider Threat Engineer","company":{"id":158,"name":"Grab","domain":"grab.com","url":"https://alion.io/company/grab","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":54,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":30,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Jakarta, Indonesia"],"countries":["ID"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":40000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-09-10T03:51:16Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-10-31T14:23:06Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"About Grab and Our Workplace\nGrab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.\n Get to Know the Team\nThe Insider Threat Management team is part of Cyber Defense. We protect Grab's people, data, systems, and customers from risks involving trusted users, compromised identities, data misuse, privilege abuse, and latest AI-enabled threats.\nWe are an evidence-led, engineering-focused team. We combine behavioural analytics, threat hunting, investigations, and security controls to detect meaningful risks early while respecting privacy, due process, and legitimate business activity.\nYou will work with Security Engineering, Enterprise Security, Identity and Access Management, Endpoint Security, Data Governance, Privacy, Legal, People, and AI teams across Grab.\nGet to Know the Role\nYou will help build and operate Grab's insider threat detection and investigation capabilities across identity, endpoints, cloud services, SaaS applications, enterprise systems, data platforms, and AI environments.\nThis is a senior, hands-on engineering role. You will turn complex and sometimes ambiguous threat scenarios into measurable signals, scalable detections, investigation workflows, and preventive controls.\nYou will report to the Lead of Insider Threat Detection. This is an onsite role based in Jakarta.\nThe Critical Tasks You Will Perform\nYou will design, build and improve behavioural detections for data misuse, unusual access, excessive downloads, unauthorised data movement, credential misuse, privilege abuse, and attempts to bypass security controls.\nYou will lead complex technical investigations and proactive threat hunts, correlating identity, endpoint, network, cloud, SaaS, application, and data-access telemetry to reconstruct user activity and assess risk.\nYou will develop queries, scripts, data pipelines, risk-scoring models, and automation to improve telemetry enrichment, alert quality, case triage, investigation speed, and detection coverage.\nYou will partner with Identity and Access Management, Endpoint Security, Data Governance, and Enterprise Security teams to identify and address gaps across DLP, CASB, SIEM, UEBA, EDR/XDR, cloud, and data-protection controls.\nYou will develop detection scenarios for Generative AI, large language models, AI agents, and Shadow AI, including sensitive-data exposure, misuse of enterprise AI capabilities, and AI-assisted attempts to evade security controls.\n The Essential Skills You Will Need\nAt least 5 years of experience in cybersecurity engineering, detection engineering, threat hunting, incident response, insider threat, or enterprise data protection.\nProficiency in SQL and at least one programming or security-query language such as Python, KQL, or SPL.\nA solid understanding of identity, endpoint, cloud, SaaS, and enterprise data architectures, including common paths for credential, privilege, and data misuse.\nPractical experience investigating user activity across multiple telemetry sources and producing evidence-based findings.\nFamiliarity with SIEM, UEBA, DLP, CASB, EDR/XDR, IAM, and cloud-security platforms.\nHands-on experience building and tuning detections using large-scale security datasets, behavioural baselines, event correlation, anomaly detection, or risk scoring.\nExperience using AI tools and latest technologies to improve security workflows, with care when handling sensitive information.\n Life at Grab\nWe care about your well-being at Grab, here are some of the global benefits we offer:\nWe have your back with Term Life Insurance and comprehensive Medical Insurance.\nWith GrabFlex, create a benefits package that suits your needs and aspirations.\nCelebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave\nWe have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.\nBalancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours\nWhat We Stand For at Grab\nWe are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.","description_format":"text","description_chars":4857,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Health insurance","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Transportation & Logistics","Ride Hailing"],"lifecycle":[{"event":"open","at":"2026-09-10T05:27:35Z"}],"visa":[],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.532,"p_room":0.36,"age_days":51,"expected_fill_days":30,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/grab-senior-insider-threat-engineer","json_url":"https://alion.io/job/grab-senior-insider-threat-engineer.json","meta":{"generated_at":"2026-10-31T15:30:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24274,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":158},"rest":"https://alion.io/mcp/rest/get_company?id=158"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgrab-senior-insider-threat-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgrab-senior-insider-threat-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgrab-senior-insider-threat-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/grab-senior-insider-threat-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgrab-senior-insider-threat-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":586690}},{"tool":"search_jobs","arguments":{"company":"grab.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":586690},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}