Security Engineer (Bangkok Based, Relocation Support)

About Agoda

Agoda connects travelers worldwide by offering seamless access to millions of accommodations, flights, and experiences. Founded in 2005 by two friends passionate about travel, the company has grown into a global organization with over 7,000 employees from 90 countries, all united in delivering innovative and data-driven travel solutions.

Role Overview

We are seeking an experienced Senior Security Engineer to enhance the security posture of our cloud and platform environments. This hands-on role requires collaboration with engineering teams to develop, assess, and maintain security controls leveraging Infrastructure as Code, Kubernetes, and bespoke security services crafted with Go and TypeScript.

Key Responsibilities

• Architect, deploy, and administrate secure cloud infrastructures on AWS and GCP using Terraform.
• Implement and oversee internal and third-party security solutions within Kubernetes clusters.
• Operate GitOps workflows with tools such as Argo CD, Flux, and Helm charts to manage deployments securely.
• Create and maintain security automation tools utilizing Go and TypeScript.
• Proactively detect, analyze, and remedy cloud configuration errors and vulnerabilities.
• Offer expert guidance to engineering teams on secure cloud architecture design.
• Develop and refine cloud-native threat detection mechanisms and alerting systems to identify malicious activity in cloud and container environments.

Required Skills & Experience

• A minimum of 8 years in security engineering, focused on cloud or platform security.
• Proven proficiency in securing production workloads within AWS and GCP platforms.
• Expertise in Infrastructure as Code security, particularly with Terraform.
• In-depth knowledge of Kubernetes security, including troubleshooting Helm and GitOps-based workflows.
• Strong coding skills in Go and TypeScript, with the use of Python for automation tasks.
• Experience integrating security controls into continuous integration and continuous deployment (CI/CD) pipelines.
• Mandatory certifications: Certified Kubernetes Administrator (CKA) and Certified Kubernetes Security Specialist (CKS).
• Preferred certifications include AWS Certified Security Specialty, Google Professional Cloud Security Engineer, and HashiCorp Certified: Terraform Associate.
• Additional valuable experience includes Policy-as-Code tools like Open Policy Agent (OPA) and securing service mesh frameworks such as Istio.
• Background in software or platform engineering prior to specializing in security is advantageous.

Additional Information

Agoda values diversity and inclusion, offering equal employment opportunities without discrimination based on gender, age, race, nationality, disability, or other protected characteristics. Your application will be kept confidential and can be removed upon request. Note that unsolicited agency submissions are not accepted and may lead to direct hiring without recruitment fees involved.