Senior Security Engineer - Cloud and Platform Security (Bangkok-Based, Relocation Provided)

About Agoda

Agoda is a global travel technology company founded in 2005 by two friends driven by a passion for travel. Integrated as part of Booking Holdings, Agoda employs over 7,000 individuals across 90 countries. The company connects users with millions of hotels, flights, and travel experiences worldwide, leveraging data and technology to fuel innovation and curiosity every day.

Role Overview

We are seeking a Senior Security Engineer skilled in securing cloud and platform infrastructures. The role emphasizes hands-on responsibilities around building, auditing, and maintaining security frameworks using Infrastructure as Code, Kubernetes, and developing custom security services primarily with Go and TypeScript. Close collaboration with engineering teams is essential to promote secure cloud deployments.

Key Responsibilities

• Design, deploy, and oversee secure cloud infrastructure across AWS and GCP utilizing Terraform.
• Manage the deployment and operation of internal and third-party security tools within Kubernetes.
• Implement and maintain GitOps workflows with Argo CD, Flux, and Helm charts.
• Create and enhance security automation tools and services using Go and TypeScript.
• Identify, analyze, and remediate cloud misconfigurations proactively.
• Provide expert advice on cloud architecture security to engineering teams.
• Develop and fine-tune cloud-native threat detection rules and alerting to monitor suspicious activity in cloud and container environments.

Required Qualifications and Experience

• At least 8 years’ experience in security engineering, cloud security, or platform engineering roles.
• Proven hands-on expertise securing live production workloads on AWS and Google Cloud Platform.
• Strong skills in designing secure Infrastructure as Code using Terraform.
• Deep understanding of Kubernetes security, including troubleshooting Helm and working with GitOps-based workflows.
• Proficiency in programming with Go and TypeScript; Python scripting for automation as needed.
• Experience integrating security controls within CI/CD pipelines.
• Certifications required: Certified Kubernetes Administrator (CKA) and Certified Kubernetes Security Specialist (CKS).
• Preferred certifications: AWS Certified Security Specialty, Google Professional Cloud Security Engineer, HashiCorp Certified: Terraform Associate.
• Desirable experience with policy-as-code frameworks like Open Policy Agent (OPA) and securing Istio service mesh environments.
• Background in software or platform engineering prior to transitioning into security is advantageous.

Diversity and Equal Opportunity

Agoda is committed to equality in recruitment and employment, fostering diversity across all dimensions including gender, race, ethnicity, disability, and veteran status among others. Employment decisions are strictly based on merit and qualifications.

Additional Notes

Applications are retained for future opportunities; candidates can request deletion of their data per privacy compliance. Agoda does not acknowledge any agency claims for unsolicited candidate submissions and reserves the right to hire independently without recruitment fees.