Senior Security Engineer, Cyber Defence Operations

📋 Description

• Lead cybersecurity incidents: coordinate responders, guide containment and remediation, and lead
• Join a 24/7 on-call rotation.
• Triage security alerts from network, EDR and cloud sources, and handle escalations from complex
• Run deep-dive forensics across cloud, network, host and application layers.
• Tune detections and hunt for threats using log and data analytics.
• Build automation (Python, SOAR playbooks) and lead the use of AI and agentic workflows in triage

🎯 Requirements

• 5+ years in a Security Operations Centre, incident response or digital forensics role, including
• Hands-on SIEM and EDR experience (for example Splunk, Sentinel, CrowdStrike).
• Forensics skills across cloud (AWS preferred), network and host (Windows, Linux, macOS)
• Python scripting and security automation experience.
• Practical application of AI and LLM tools in security operations.
• Knowledge of MITRE ATT&CK and NIST Incident Response frameworks.

🎁 Benefits

• Term Life Insurance and comprehensive Medical Insurance.
• GrabFlex - create a benefits package that suits your needs and aspirations.
• Parental and Birthday leave.
• Love-all-Serve-all (LASA) volunteering leave.
• Confidential Grabber Assistance Programme.
• FlexWork arrangements such as differentiated hours.