Security Engineer (Bangkok Based, Relocation Support)

About the role

This role is part of the Senior Security Engineer team at Agoda, a leading provider of travel services. The ideal candidate will be responsible for securing Agoda's cloud and platform environments, collaborating with engineering teams, and implementing security controls using Infrastructure as Code, Kubernetes, and custom security services.

Responsibilities

• Secure Cloud Deployment: Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
• Kubernetes & GitOps Security: Deploy and manage both internal and third-party security products within the Kubernetes ecosystem.
• Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
• Security Automation & Tooling: Design and build security tooling and services using Go and TypeScript.
• Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
• Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
• Threat Detection & Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.

Requirements

• 8+ years of experience in security engineering, cloud security, or platform engineering roles.
• Hands-on experience securing production workloads in AWS and GCP.
• Strong experience designing and securing Infrastructure as Code using Terraform.
• Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
• Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
• Experience embedding security controls into CI/CD pipelines.
• Certifications: Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS).

Skills

• Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
• Experience securing service mesh environments (Istio).
• Nice-to-have: Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
• Nice-to-have: Experience securing service mesh environments (Istio).

Benefits

At Agoda, we offer a competitive compensation package, comprehensive benefits, and opportunities for professional growth and development. We also provide a supportive and inclusive workplace culture that encourages collaboration and innovation.

Pay

The salary range for this position is $120,000 - $160,000 annually, depending on experience and qualifications.

Schedule

The role is full-time and is based in San Francisco, San Jose, Los Angeles, San Diego, Oakland, Denver, Miami, Orlando, Atlanta, Chicago, Boston, Detroit, New York, Portland, Philadelphia, Dallas, Houston, Austin, Seattle, Sydney, Melbourne, Perth, Toronto, Vancouver, Montreal, Shanghai, Beijing, Shenzhen, Prague, Brno, Ostrava, Cairo, Alexandria, Giza, Estonia, Paris, Berlin, Munich, Hamburg, Stuttgart, Cologne, Frankfurt, Hong Kong, Budapest, Jakarta, Bali, Dublin, Tel Aviv, Milan, Rome, Venice, Florence, Naples, Turin, Palermo, Bologna, Tokyo, Osaka, Kualalumpur, Malta, Amsterdam, Oslo, Manila, Warsaw, Krakow, Doha, Al Rayyan, Riyadh, Jeddah, Mecca, Medina, Singapore, Seoul, Barcelona, Madrid, Stockholm, Zurich, Taipei, Tainan, Taichung, Kaohsiung, Bangkok, Phuket, Istanbul, London, Manchester, Edinburgh, HCMC, Hanoi, Lodz, Wroclaw, Poznan, Katowice, Rio, Salvador, New Delhi, Bangalore, Bandung, Yokohama, Nagoya, Okinawa, Fukuoka, Jerusalem, IT.

Company Culture

Discover more about working at Agoda and learn about our commitment to diversity and inclusion. Read our Hiring Process Guidelines and watch videos showcasing life at Agoda.

Equal Opportunity Employer

For more details, please read our Privacy Policy.

Disclaimer: We do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.