Get to Know the Team
We work with Security Operations, incident responders, platform teams, and other cyber functions to automate manual and complex security processes through reusable services, integrations, and workflows. We also turn telemetry, threat intelligence, incident findings, and purple-team findings into high-fidelity detections and automated responses. Using detection-as-code across SIEM, EDR, SOAR, and security data lake platforms, we support security visibility and signal quality. Additionally, we support detection coverage and response across cloud, SaaS, endpoint, and identity environments.
Get to Know the Role
We are looking for a hands-on Senior Software Engineer to build and operate scalable security observability platforms, detection pipelines, response automation, integrations, and backend services. Reporting to the Security Engineering Manager for Security Automation and Detection Engineering, you will work across discovery, design, implementation, and operations. You will improve security telemetry collection, normalisation, and enrichment while advocating detection capabilities into engineering platforms.
The Critical Tasks You Will Perform
- Develop, test, deploy, and operate scalable security observability platforms, detection pipelines, automation workflows, APIs, and backend services.
- Partner with security, application, platform, and infrastructure teams to identify inefficient processes and deliver automation that fits Grab's engineering ecosystem.
- Integrate SIEM, EDR, SOAR, cloud services, security data lakes, and observability tools while advocating detection and response into cloud, CI/CD, and developer platforms.
- Build capabilities for telemetry collection and enrichment, detection-as-code, alert assessment, investigation, case management, containment, and automated response.
- Engineer services for code quality, automated testing, observability, reliability, performance, and operational support at high telemetry volumes.
- Evaluate latest and open-source security technologies, contribute improvements, and integrate suitable capabilities into production workflows.
What Essential Skills You Will Need
- A degree in Computer Science, Software Engineering, Cyber Security, or a related field.
- At least six years of software-engineering experience, with computer-science fundamentals and experience designing and operating production systems.
- Proficiency in at least one programming language, with the willingness to work in Go and Python.
- Experience building backend services, APIs, integrations, and data-processing workflows.
- Hands-on experience with AWS and NoSQL technologies.
- Experience with CI/CD, automated testing, version control, code review, observability, reliability, scalability, and incident troubleshooting.
- AI fluency, including responsible use of AI-assisted engineering tools and critical evaluation of generated outputs.
- Prior experience with cybersecurity concepts, tools, or practices is an advantage.