Security Engineer (Bangkok Based, Relocation Support)

About the role

Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.

Kubernetes & GitOps Security: Deploy and manage both internal and third-party security products within the Kubernetes ecosystem.

Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.

Security Automation & Tooling: Design and build security tooling and services using Go and TypeScript.

Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.

Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.

Threat Detection & Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.

Responsibilities

• Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
• Kubernetes & GitOps Security: Deploy and manage both internal and third-party security products within the Kubernetes ecosystem.
• Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
• Security Automation & Tooling: Design and build security tooling and services using Go and TypeScript.
• Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
• Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
• Threat Detection & Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.

Requirements

• 8+ years of experience in security engineering, cloud security, or platform engineering roles.
• Hands-on experience securing production workloads in AWS and GCP.
• Strong experience designing and securing Infrastructure as Code using Terraform.
• Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
• Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
• Experience embedding security controls into CI/CD pipelines.

Qualifications

• Certified Kubernetes Administrator (CKA)
• Certified Kubernetes Security Specialist (CKS)
• HashiCorp Certified: Terraform Associate

Skills

• Nice-to-have experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
• Experience securing service mesh environments (Istio).

Benefits

• No explicit benefits listed.

Pay

• No explicit pay information provided.

Schedule

• No explicit schedule information provided.

Additional Information

Agoda is an Equal Opportunity Employer. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

Application Instructions

Please apply for this job through the provided link.