{"id":29655,"url":"https://alion.io/job/grab-senior-security-engineer-threat-detection","title":"Senior Security Engineer - Threat Detection","company":{"id":158,"name":"Grab","domain":"grab.com","url":"https://alion.io/company/grab","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":45,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Petaling Jaya, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":42000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-07-28T10:13:24Z","employer_posted_date":"2026-07-28","last_verified_at":"2026-10-18T09:22:02Z","board_verified":true,"closed_at":null,"days_open":82,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":82},"description":"About Grab and Our Workplace\nGrab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.\n Get to know our Team\nWe're looking for a Senior Security Engineer to join our SecAID team in Petaling Jaya, Malaysia. SecAID sits at the intersection of offensive security and software engineering. We build and operate tooling that scales security across Grab's engineering organisation, embed security into the development lifecycle before code ships, and work directly with product and platform teams to raise the security bar.\nGet to know the Role\nYou won't just assess and reporting. You'll be a force in how Grab engineers build securely. You will shape pipelines, influencing design decisions early, triage scanner output at scale, and making security something engineering teams do with us rather than something done to them. You will suit someone who is technically deep in offensive security and mature enough to operate as a security partner to a engineering organisation. You will be reporting to Software Engineering Manager II, Threat Detection.\nThis role is onsite based in our Petaling Jaya, Malaysia office.\nThe Critical Tasks You Will Perform\nDevSecOps and Shift-Left Security\nYou will advocate for security integration into CI/CD pipelines across Grab's engineering teams, working with platform and developer experience teams to embed security gates early in the development lifecycle\nYou will build security guardrails, standards, and developer-facing guidance that teams can self-serve without waiting for a security review\nYou will identify systemic patterns across findings and translate them into reusable secure coding standards, reference architectures, and training materials for engineering teams\nSecurity Assessments and Penetration Testing\nYou will conduct application-layer security assessments across Grab's services covering APIs, web, and mobile attack surfaces, producing findings that service teams can act on\nYou will evaluate findings from automated DAST scans against OWASP ASVS controls, triage true positives from false positives, and provide clear remediation guidance\nThreat Hunting and Detection\nYou will investigate Grab's environments for indicators of compromise, anomalous behaviour, and attacker techniques that evade automated detection\nYou will develop threat hunting hypotheses grounded in attacker tradecraft and apply them to Grab's specific technology landscape\nYou will contribute to detection logic and work with operations teams to operationalise findings from hunting activity\nTeam and Stakeholder Enablement\nYou will be a technical authority for the team across security engineering work and mentor teammates from both security and software engineering backgrounds\nYou will be a trusted advisor to product and platform engineering teams, helping them understand findings and implement security improvements rather than just receiving a ticket\n What Essential Skills You will Need\nYou have 5+ years in cybersecurity with a offensive security foundation; you have done assessments, found vulnerabilities, and understand how attackers think\nYou have solid hands-on experience in application security: API testing, auth flows, injection classes, business logic abuse, OWASP Top 10 and ASVS\nYou demonstrated experience integrating security into software development pipelines, including hands-on work with SAST, DAST, SCA, or secrets scanning tools in a CI/CD context\nYou have enough software engineering knowledge to read code, review architecture diagrams, and have credible conversations with developers; you do not need to build production systems but you need to understand them\nYou have experience conducting security design and specification reviews\nGood to have:\nYou have offensive security certifications: OSCP, OSWE, BSCP, or equivalent practical credentials\nYou have familiarity with cloud-native architectures (AWS, GCP, or Azure) and container security\nYou have experience with MITRE ATT&CK and applying it to detection or assessment work\nYou have background working in a product company or platform engineering environment with an understanding of the pace and constraints of a shipping team\nYou have experience building developer-facing security programmes, secure coding standards, or threat modelling frameworks\n Life at Grab\nWe care about your well-being at Grab, here are some of the global benefits we offer:\nWe have your back with Term Life Insurance and comprehensive Medical Insurance.\nWith GrabFlex, create a benefits package that suits your needs and aspirations.\nCelebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave\nWe have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.\nWhat We Stand For At Grab\nWe are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.","description_format":"text","description_chars":5611,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Health insurance","Life insurance"],"hiring_locations":[{"name":"Malaysia","iso":"MY","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Delivery","Ride Hailing","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-07-28T10:13:24Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.369,"p_room":0.28,"age_days":80,"expected_fill_days":29,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/grab-senior-security-engineer-threat-detection","json_url":"https://alion.io/job/grab-senior-security-engineer-threat-detection.json","meta":{"generated_at":"2026-10-18T11:00:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16225,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":158},"rest":"https://alion.io/mcp/rest/get_company?id=158"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgrab-senior-security-engineer-threat-detection"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgrab-senior-security-engineer-threat-detection"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgrab-senior-security-engineer-threat-detection"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/grab-senior-security-engineer-threat-detection\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgrab-senior-security-engineer-threat-detection"}]}