Senior Software Engineer, CSADE

Get to Know the Team

We work with Security Operations, incident responders, platform teams, and other cyber functions to automate manual and complex security processes through reusable services, integrations, and workflows. We also turn telemetry, threat intelligence, incident findings, and purple-team findings into high-fidelity detections and automated responses. Using detection-as-code across SIEM, EDR, SOAR, and security data lake platforms, we support security visibility and signal quality. Additionally, we support detection coverage and response across cloud, SaaS, endpoint, and identity environments.

Get to Know the Role

We are looking for a hands-on Senior Software Engineer to build and operate scalable security observability platforms, detection pipelines, response automation, integrations, and backend services. Reporting to the Security Engineering Manager for Security Automation and Detection Engineering, you will work across discovery, design, implementation, and operations. You will improve security telemetry collection, normalisation, and enrichment while advocating detection capabilities into engineering platforms.

The Critical Tasks You Will Perform

• Develop, test, deploy, and operate scalable security observability platforms, detection pipelines, automation workflows, APIs, and backend services.
• Partner with security, application, platform, and infrastructure teams to identify inefficient processes and deliver automation that fits Grab's engineering ecosystem.
• Integrate SIEM, EDR, SOAR, cloud services, security data lakes, and observability tools while advocating detection and response into cloud, CI/CD, and developer platforms.
• Build capabilities for telemetry collection and enrichment, detection-as-code, alert assessment, investigation, case management, containment, and automated response.
• Engineer services for code quality, automated testing, observability, reliability, performance, and operational support at high telemetry volumes.
• Evaluate latest and open-source security technologies, contribute improvements, and integrate suitable capabilities into production workflows.