Senior Security Engineer, Red Team

About the role

Grab is hiring a Senior Security Engineer for its Red Team & Threat Intel team in Singapore. The team improves the security posture of Grab's products, platforms, cloud environments, AI systems and enterprise technology across Southeast Asia by emulating real-world adversaries, identifying high-impact risks and strengthening prevention, detection and response. You will report to the team leader and run complex red team operations across cloud, CI/CD, endpoint, identity, application and AI environments.

Key responsibilities

• Manage end-to-end red team operations and intelligence-led Purple Team exercises with the Blue Team, covering cloud infrastructure, CI/CD pipelines, identity systems, endpoints and applications.
• Develop command-and-control tooling, implants, payload delivery mechanisms and operator workflows for authorised security exercises.
• Red team AI systems, including internal copilots, agentic workflows, AI-assisted tools and MLOps environments.
• Use AI tools to improve research, automation, payload development, reporting, planning and analysis of defensive coverage.
• Turn red team findings and threat intelligence into engineering actions, working with defenders, platform teams and the Vulnerability Management team to improve detection, response, hardening, security architecture and risk prioritisation.
• Contribute to the Red Team and Threat Intel roadmap, identify attack techniques and evaluate new tooling.
• Produce Threat Intel assessments from incidents observed in the wild or internal improvement opportunities, and advise leadership on impact, priority and next actions.

Required profile

• 4 or more years of experience in offensive security, red teaming, security engineering, exploit development, cloud security or adjacent technical security roles.
• Experience assessing CI/CD systems, source control platforms, build pipelines, artefact repositories, secrets handling and deployment workflows.
• Firm knowledge of cloud environments, including identity, networking, logging, container platforms and common privilege escalation paths.
• Experience assessing AI-enabled products, internal AI platforms or agentic systems in adversarial scenarios, and using AI tools to improve security research and output quality.
• Experience producing or using Threat Intel to connect external incident trends, adversary tradecraft and internal signals to practical security decisions.
• Knowledge of Windows, Linux and macOS, endpoint internals, enterprise management and defensive controls is an added value.

Required skills

• Hands-on development of command-and-control tooling, implants, loaders, payloads and offensive automation.
• Cloud security and CI/CD assessment.
• Threat intelligence and red teaming.

What we offer

• Term life insurance and comprehensive medical insurance.
• Parental and birthday leave, plus volunteering leave.
• A confidential assistance programme for Grabbers and their families.
• FlexWork arrangements such as differentiated hours.