About the role
structured by ORI### Senior Security Engineer, Red Team • Team Security • Location Singapore, Singapore • Job Type Full-time The role at a glance Get to Know the Team Join Grab's Red Team & Threat Intel team, which helps improve the security posture of Grab's products, platforms, cloud environments, AI systems, and enterprise…
What you will do
- Manage end-to-end red team operations, and intelligence-led Purple Team exercises with the Blue Team.
- Develop command-and-control tooling, implants, payload delivery mechanisms, and operator workflows for authorised security exercises.
- Red team AI systems, including internal copilots, agentic workflows, AI-assisted operational tools, and MLOps environments.
- Translate red team findings and threat intelligence into clear engineering actions.
- Produce Threat Intel assessments from security incidents observed in the wild or improvement opportunities identified internally.
What they are looking for
- You will have 4 or more years of experience in offensive security, red teaming, security engineering, exploit development, cloud security, or adjacent technical security roles.
- You will have hands-on experience developing command-and-control tooling, implants, loaders, payloads, or offensive automation.
- You will have practical experience assessing CI/CD systems, source control platforms, build pipelines, artefact repositories, secrets handling, and deployment workflows.
- You will have firm knowledge of cloud environments, including identity, networking, logging, container platforms, and common privilege escalation paths.
- You will have experience assessing AI-enabled products, internal AI platforms, or agentic systems in adversarial scenarios, and using AI tools to improve security research, workflows, and output quality.
- You will have experience producing or using Threat Intel to connect external incident trends, adversary tradecraft, and internal security signals to practical security decisions.
Nice to have
- Knowledge of the major 3 operating systems (Windows/Linux/macOS), endpoint internals, enterprise management, and defensive controls would be an added value
Benefits
- Term Life Insurance and comprehensive Medical Insurance.
- With GrabFlex, create a benefits package that suits your needs and aspirations.
- Parental and Birthday leave, and Love-all-Serve-all (LASA) volunteering leave
- Confidential Grabber Assistance Programme
- FlexWork arrangements such as differentiated hours
Full posting text
Senior Security Engineer, Red Team
•
Team
Security
•
Location
Singapore, Singapore
•
Job Type
Full-time
The role at a glance
Get to Know the Team
Join Grab's Red Team & Threat Intel team, which helps improve the security posture of Grab's products, platforms, cloud environments, AI systems, and enterprise technology across Southeast Asia.
The team partners with Security, Engineering, Infrastructure, IT, and business teams. This partnership enables the team to emulate real-world adversaries, identify the highest-impact risks, and help Grab strengthen its preventive, detective, and response capabilities. The Threat Intel function brings external incident trends, adversary behaviours, and internal improvement opportunities into Grab's security priorities.
This helps the team plan intelligence-led Purple Team exercises, advise leadership, and support risk prioritisation with the Vulnerability Management team. We work with curiosity, technical depth, and responsibility, using offensive security techniques and threat intelligence to make Grab safer for our users, partners, and Grabbers.
Get to Know the Role
You will report to the Red Team & Threat Intel team leader and perform complex red team operations across cloud, CI/CD, endpoint, identity, application, and AI environments. You will design realistic attack simulations, develop offensive tooling, apply threat intelligence to Purple Team planning, and turn findings into practical improvements for engineering and security teams.
This role is based in Singapore. You will help shaping Grab's Red Team and Threat Intel capabilities, and influence how we use AI and automation to scale offensive security work responsibly. If you enjoy building tools, testing assumptions, and helping defenders get sharper, we will give you the platform to make a regional impact.
The Critical Tasks You Will Perform
- You will manage end-to-end red team operations, and intelligence-led Purple Team exercises with the Blue Team. These exercises will emulate realistic adversary behaviour across multiple environments, including cloud infrastructure, CI/CD pipelines, identity systems, endpoints, and applications.
- You will develop command-and-control tooling, implants, payload delivery mechanisms, and operator workflows for authorised security exercises.
- You will red team AI systems, including internal copilots, agentic workflows, AI-assisted operational tools, and MLOps environments.
- You will use AI tools to improve research, automation, payload development, reporting, operational planning, and analysis of defensive coverage.
- You will translate red team findings and threat intelligence into clear engineering actions. You will partner with defenders, platform teams, and the Vulnerability Management team to improve detection, response, hardening, security architecture, and risk prioritisation.
- You will work with other team members on offensive security tradecraft, tool development, operational safety, documentation, and responsible execution of adversary simulations.
- You will contribute to the Red Team and Threat Intel roadmap. Your contributions will involve identifying the latest attack techniques and evaluating new tooling.
- You will produce Threat Intel assessments from security incidents observed in the wild or improvement opportunities identified internally. Additionally, you will advise leadership on likely impact, priority, and next actions.
Read more
Skills you need
What Essential Skills You Will Need
- You will have 4 or more years of experience in offensive security, red teaming, security engineering, exploit development, cloud security, or adjacent technical security roles.
- You will have hands-on experience developing command-and-control tooling, implants, loaders, payloads, or offensive automation.
- You will have practical experience assessing CI/CD systems, source control platforms, build pipelines, artefact repositories, secrets handling, and deployment workflows.
- You will have firm knowledge of cloud environments, including identity, networking, logging, container platforms, and common privilege escalation paths.
- You will have experience assessing AI-enabled products, internal AI platforms, or agentic systems in adversarial scenarios, and using AI tools to improve security research, workflows, and output quality.
- You will have experience producing or using Threat Intel to connect external incident trends, adversary tradecraft, and internal security signals to practical security decisions.
- Knowledge of the major 3 operating systems (Windows/Linux/macOS), endpoint internals, enterprise management, and defensive controls would be an added value
Read more
What we offer
About Grab and Our Workplace
Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.
Read more
Life at Grab
Life at Grab
We care about your well-being at Grab, here are some of the global benefits we offer:
- We have your back with Term Life Insurance and comprehensive Medical Insurance.
- With GrabFlex, create a benefits package that suits your needs and aspirations.
- Celebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
- We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.
- Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours
What We Stand For At Grab
We are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.
Read more
What’s it like to work at Grab?
Play video
View our location
Nestled in the vibrant heart of Singapore is Grab's Global HQ! Take a tour of our office here, meet some of our teams and find out what it’s like to work in this vibrant cosmopolitan.
[Click to enlarge image]
[Click to enlarge image]
[Click to enlarge image]
[Click to enlarge image]
[Click to enlarge image]
Meet the Security team
Our Security people are the guardians of all information across the company. We're the folks who plan, execute, and set rules to keep everything – from people to places and the important stuff – super secure.
The team is made up of tenacious individuals who never take ‘impossible’ for an answer. We chisel away at problems bit by bit and sometimes we tear the house down completely – but we never walk away from solving some of the biggest challenges that could compromise our users' trust and safety.
“
”
Integrity is a fascinating field to be in. Saving a life by preventing a road accident, blocking an account takeover by a fraudster, or outsmarting a scrupulous driver attempting to make fake bookings; all of these are challenging and interesting problems to solve. We use a tonne of data, algorithms, and tech, but it's just as crucial to get what's happening on the ground and in the minds of users and fraudsters to drive results.
“
”
Embrace challenges and continue to build up your skills and knowledge in the fast-paced, changing world of technology. That’s how you succeed at Grab.
“
”
The Application Process
What can you expect when you apply for a role at Grab? Here’s what our hiring process looks like.
Step 1: Apply.
We have a range of open roles from Marketing to Engineering and everything in between. Find the one that’s best for you and show us why you’re our next teammate.
Step 2: Getting to know you.
Next, you’ll have a video or phone interview with one of our recruiters to chat about you, the role, and your past work experiences.
Step 3: Testing, testing… 123.
Some roles might require assessments and/or a technical competency interview. For other roles, there might be an additional interview – speak with your recruiter for application details.
Step 4: Is it a culture match?
Finally, we’ll find out how we fit together, if your career vision aligns with our mission, how you embody the 4 H's, and your working style and personality.