2 days ago
Jakarta, IndonesiaSenior
Responsibilities
- Lead end-to-end red team operations and intelligence-led Purple Team exercises with the Blue Team across cloud infrastructure, CI/CD pipelines, identity systems, endpoints, and applications.
- Develop command-and-control tooling, implants, loaders, payload delivery mechanisms, and operator workflows for authorized security exercises.
- Conduct adversarial assessments of AI systems, internal copilots, agentic workflows, AI-assisted operational tools, and MLOps environments.
- Use AI tools to improve security research, automation, payload development, reporting, operational planning, and defensive-coverage analysis.
- Translate red team findings and threat intelligence into engineering actions related to detection, response, hardening, security architecture, and risk prioritization.
- Contribute to offensive-security tradecraft, tool development, operational safety, documentation, the team roadmap, and evaluation of emerging attack techniques and tooling.
- Produce threat intelligence assessments and advise leadership on likely impact, priority, and next actions.
Requirements
- Bachelor’s degree required.
- At least 4 years of experience in offensive security, red teaming, security engineering, exploit development, cloud security, or adjacent technical security roles.
- Hands-on experience developing command-and-control tooling, implants, loaders, payloads, or offensive automation.
- Practical experience assessing CI/CD systems, source control platforms, build pipelines, artifact repositories, secrets handling, and deployment workflows.
- Firm knowledge of cloud environments, including identity, networking, logging, container platforms, and common privilege-escalation paths.
- Experience assessing AI-enabled products, internal AI platforms, or agentic systems in adversarial scenarios and using AI tools to improve security research and workflows.
- Experience producing or using threat intelligence to connect external incident trends, adversary tradecraft, and internal security signals to practical security decisions.
- Knowledge of Windows, Linux, and macOS, endpoint internals, enterprise management, and defensive controls is an added value.
Benefits
- Term Life Insurance and comprehensive Medical Insurance.
- GrabFlex benefits package customization.
- Parental leave, Birthday leave, and Love-all-Serve-all volunteering leave.
- Confidential Grabber Assistance Programme.
- FlexWork arrangements, including differentiated hours.
- The role is based in Jakarta, Indonesia.
About Grab
Grab builds a Southeast Asia superapp for mobility, deliveries, and financial services, serving consumers, drivers, merchants, and enterprises. It monetizes via ride and delivery commissions, merchant services (such as ads and subscriptions), and payments and digital banking products. Founded in 2012 and headquartered in Singapore, Grab operates across multiple Southeast Asian markets and is publicly listed on NASDAQ.