Senior Security Engineer (Bangkok Based with Relocation Support)

About Agoda

Agoda is a leading global travel platform that began in 2005 with a mission to simplify travel for everyone. Now part of Booking Holdings, Agoda employs over 7,000 team members from around 90 countries, working worldwide to connect travelers with millions of hotels, flights, and experiences.

Data and technology drive Agoda’s culture of innovation and growth. As a Senior Security Engineer, you will play a critical role in ensuring the security of Agoda’s cloud and platform infrastructure, collaborating closely with engineering teams.

Key Responsibilities

• Design and manage secure cloud infrastructures spanning AWS and Google Cloud Platform using Infrastructure as Code, primarily Terraform.
• Deploy and maintain security tools within Kubernetes environments, integrating with GitOps workflows using Argo CD, Flux, and Helm charts.
• Create custom security automation and services leveraging programming languages such as Go and TypeScript.
• Identify, analyze, and remediate cloud misconfigurations proactively to strengthen security posture.
• Guide engineering teams on secure cloud architecture and embed security controls into continuous integration and delivery pipelines.
• Develop and refine cloud-specific threat detection mechanisms and alerting pipelines to monitor anomalous activities across cloud and containerized workloads.

Required Experience and Skills

• At least 8 years in security engineering, cloud security, or platform engineering roles.
• Proven expertise securing production environments on AWS and GCP.
• In-depth knowledge of Infrastructure as Code security, specifically with Terraform.
• Strong understanding of Kubernetes security, including practical experience troubleshooting Helm deployments and managing GitOps workflows.
• Proficient in programming with Go and TypeScript; Python skills for automation are also beneficial.
• Experience implementing security measures within CI/CD pipelines.
• Must hold certifications such as Certified Kubernetes Administrator (CKA) and Certified Kubernetes Security Specialist (CKS). Preferred certifications include AWS Certified Security Specialty, Google Professional Cloud Security Engineer, and HashiCorp Certified: Terraform Associate.
• Familiarity with policy-as-code frameworks like Open Policy Agent (OPA) and service mesh security (e.g., Istio) is advantageous.
• Prior background in software or platform engineering before focusing on security is preferred.

Equal Opportunity and Commitment to Diversity

Agoda is dedicated to fostering an inclusive workplace diverse in backgrounds and perspectives. Employment decisions are made solely on merit and qualifications without regard to legally protected characteristics.

Additional Information

Relocation support is provided for this Bangkok-based role. The company does not accept unsolicited resumes from agencies; direct applications only will be considered. Candidates' data will be retained for future opportunities with options to request removal.