Senior Insider Threat Engineer
Get to Know the Team
The Insider Threat Management team is part of Cyber Defense. We protect Grab's people, data, systems, and customers from risks involving trusted users, compromised identities, data misuse, privilege abuse, and latest AI-enabled threats.
We are an evidence-led, engineering-focused team. We combine behavioural analytics, threat hunting, investigations, and security controls to detect meaningful risks early while respecting privacy, due process, and legitimate business activity.
You will work with Security Engineering, Enterprise Security, Identity and Access Management, Endpoint Security, Data Governance, Privacy, Legal, People, and AI teams across Grab.
Get to Know the Role
You will help build and operate Grab's insider threat detection and investigation capabilities across identity, endpoints, cloud services, SaaS applications, enterprise systems, data platforms, and AI environments.
This is a senior, hands-on engineering role. You will turn complex and sometimes ambiguous threat scenarios into measurable signals, scalable detections, investigation workflows, and preventive controls.
You will report to the Lead of Insider Threat Detection. This is an onsite role based in Jakarta.
The Critical Tasks You Will Perform
- You will design, build and improve behavioural detections for data misuse, unusual access, excessive downloads, unauthorised data movement, credential misuse, privilege abuse, and attempts to bypass security controls.
- You will lead complex technical investigations and proactive threat hunts, correlating identity, endpoint, network, cloud, SaaS, application, and data-access telemetry to reconstruct user activity and assess risk.
- You will develop queries, scripts, data pipelines, risk-scoring models, and automation to improve telemetry enrichment, alert quality, case triage, investigation speed, and detection coverage.
- You will partner with Identity and Access Management, Endpoint Security, Data Governance, and Enterprise Security teams to identify and address gaps across DLP, CASB, SIEM, UEBA, EDR/XDR, cloud, and data-protection controls.
- You will develop detection scenarios for Generative AI, large language models, AI agents, and Shadow AI, including sensitive-data exposure, misuse of enterprise AI capabilities, and AI-assisted attempts to evade security controls.
The Essential Skills You Will Need
- At least 5 years of experience in cybersecurity engineering, detection engineering, threat hunting, incident response, insider threat, or enterprise data protection.
- Proficiency in SQL and at least one programming or security-query language such as Python, KQL, or SPL.
- A solid understanding of identity, endpoint, cloud, SaaS, and enterprise data architectures, including common paths for credential, privilege, and data misuse.
- Practical experience investigating user activity across multiple telemetry sources and producing evidence-based findings.
- Familiarity with SIEM, UEBA, DLP, CASB, EDR/XDR, IAM, and cloud-security platforms.
- Hands-on experience building and tuning detections using large-scale security datasets, behavioural baselines, event correlation, anomaly detection, or risk scoring.
- Experience using AI tools and latest technologies to improve security workflows, with care when handling sensitive information.
About Grab and Our Workplace
Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.
Life at Grab
We care about your well-being at Grab, here are some of the global benefits we offer:
- We have your back with Term Life Insurance and comprehensive Medical Insurance.
- With GrabFlex, create a benefits package that suits your needs and aspirations.
- Celebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
- We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.
- Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours
What We Stand For at Grab
We are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.
Meet the Security team
Our Security people are the guardians of all information across the company. We're the folks who plan, execute, and set rules to keep everything – from people to places and the important stuff – super secure.
The team is made up of tenacious individuals who never take ‘impossible’ for an answer. We chisel away at problems bit by bit and sometimes we tear the house down completely – but we never walk away from solving some of the biggest challenges that could compromise our users' trust and safety.
“ ”
Integrity is a fascinating field to be in. Saving a life by preventing a road accident, blocking an account takeover by a fraudster, or outsmarting a scrupulous driver attempting to make fake bookings; all of these are challenging and interesting problems to solve. We use a tonne of data, algorithms, and tech, but it's just as crucial to get what's happening on the ground and in the minds of users and fraudsters to drive results.
“ ”
Embrace challenges and continue to build up your skills and knowledge in the fast-paced, changing world of technology. That’s how you succeed at Grab.
“ ”
The Application Process
What can you expect when you apply for a role at Grab? Here’s what our hiring process looks like.
Step 1: Apply.
We have a range of open roles from Marketing to Engineering and everything in between. Find the one that’s best for you and show us why you’re our next teammate.
Step 2: Getting to know you.
Next, you’ll have a video or phone interview with one of our recruiters to chat about you, the role, and your past work experiences.
Step 3: Testing, testing… 123.
Some roles might require assessments and/or a technical competency interview. For other roles, there might be an additional interview – speak with your recruiter for application details.
Step 4: Is it a culture match?
Finally, we’ll find out how we fit together, if your career vision aligns with our mission, how you embody the 4 H's, and your working style and personality.
