Get to know our Team:
Grab’s Incident Response team is responsible for detecting and mitigating attempts to abuse Grab’s networks, data, resources, and employees. We focus on both internal and external threats and have a diverse array of talented individuals on the team. If you want to help build the response team of one of SE Asia’s highest profile companies, this is the place for you.
Get to know the Role:
As a Network Security Analyst at Grab, you’ll be responsible for monitoring, detecting, and responding to potential threats against Grab’s networks around the world. In your spare time, you’ll actively hunt through our networks for undetected suspect activity and drive your findings to ground. You’ll use tried and true techniques, tools, and best practices and also invent new ones along the way. You’ll be surrounded by smart, driven people who all care about Grab’s mission and information security.
The day-to-day activities:
- Generate: alert criteria for network intrusions and push them to production. Also produce decision criteria and playbooks for alerts, automating as much as possible
- Hunt: Be proactive and use the latest threat intel and/or best practices to hunt down potentially malicious activity in our network
- Respond: When an incident occurs, you will be on the front lines of response for the entire company.
- Advise: Help us pick the best solutions to nascent problems - vendors, processes, training, etc. You will use your expertise to shape the future of the team
The must haves
- Strong, proven track record of delivering results in fast-paced, resource scarce environments. Assume your favorite tool is not available but that you have the chance to learn a new one
- Ability to handle stress effectively and maintain strong output during an incident
- Curiosity and a relentless drive to understand how networks work and how they can be abused
- Initiative and drive - we are building this team from the ground up which means we often have to improvise and make important decisions with imperfect information. You should seek these opportunities out rather than shy away from them
- Scripting ability - Proficient in using languages like Ruby, Python, Perl to automate tasks and process large amounts of messy data
- Network forensic expertise - be able to stand toe to toe with our IT and infra teams while bringing a forensic and investigator’s mindset to the mix
