Senior Software Engineer, Security Engineering
Get to know the team
Our passion is anchored in the work that we do, and this is reflected in the impact we make on millions of lives on a daily basis. We are empowered by creating amazing services and tools that serve millions of passengers, driving partners, and fellow Grabbers.
You'll be part of a team that is responsible for the Security of Grab Cloud platform which is one of the largest deployments in the region.
Get to know the role
We are looking for a Senior Software Engineer to take a lead on the infrastructure security engineering projects. You will be reporting to Engineering Manager II. We believe you have cloud engineering, infrastructure automation, integration, and development skills, but if you believe you have what it takes then we'd love to hear from you either way.This role is required because we are expanding our regional infrastructure security capabilities. In return, you will work with a great team working on complex architectures and managing cloud security of one of the largest cloud deployments in the region.
This role is onsite based in our Petaling Jaya, Malaysia office.
The Critical Tasks You Will Perform- You will use technology to address clearly defined problems, constructing individual components or features based on specific tasks.
- You will grasp the project requirements thoroughly and apply this understanding to your designs.
- You will maintain a comprehensive knowledge of your codebase and systems, ensuring reliability through design reviews, monitoring, alerting, and adherence to Operational Excellence (OE) standards.
- You will take ownership of your code, ensuring it is readable, maintainable, and thoroughly tested.
- You will apply suitable data structures and algorithms. You will provide clear, relevant feedback during code reviews and respond constructively to feedback from peers.
- You will address issues promptly and keep your team informed.
- You will ensure that container environments are inherently secure, allowing for swift remediation of newly detected vulnerabilities with minimal effort.
- You will integrate vulnerability detection and alert systems into container build pipelines, empowering engineering teams to prevent the introduction of known vulnerabilities into production environments.
- Min 4 years of relevant experience building production systems
- You have proficient in deploying public cloud services in AWS, Azure, or GCP.
- You have the ability to perform automation using Terraform/Ansible/Chef/Puppet, Docker/Kubernetes, and any one CI tools (e.g. Jenkins, Gitlab, Travis CI)
- You have comfortable to code in at least one high-level programming language - Java, Python, or Golang
- You understand clean architecture principles.
- You have experience with web frameworks and understanding of RESTful APIs.
- You have knowledge of Kubernetes for container orchestration and management
Good to have:
- You have knowledge of Cloud Security and understanding of Security Operations, DevSecOps, or Security Automation