Security Engineer with Cloud and Kubernetes Expertise (Bangkok Based)

About Agoda

Established in 2005 by two passionate entrepreneurs, Agoda is a global travel technology company that connects millions of travelers with hotels, flights, and experiences worldwide. As part of Booking Holdings, Agoda employs over 7,000 professionals from 90 countries, operating across multiple international locations. Innovation and data-driven insights are integral to our culture, inspiring continuous improvement in global travel.

Role Overview

We are seeking an experienced Senior Security Engineer to fortify our cloud and platform infrastructure, primarily located in Bangkok with relocation support available. The role involves collaboration with engineering teams to design, implement, and maintain security controls across cloud environments using Infrastructure as Code, Kubernetes, and custom security software developed in Go and TypeScript.

Key Responsibilities

• Architect and manage secure cloud deployments on AWS and GCP leveraging Terraform for infrastructure provisioning.
• Deploy and administer security solutions within Kubernetes environments including third-party and internal tools.
• Operate with GitOps methodologies utilizing tools such as Argo CD, Flux, and Helm charts for deployment management.
• Develop automated security tools and services using Go and TypeScript to enhance cloud security posture.
• Continuously detect, analyze, and resolve cloud misconfigurations to prevent vulnerabilities.
• Advise engineering teams on architecture best practices for secure system design.
• Create and refine cloud-native threat detection mechanisms and alert pipelines to monitor suspicious activities in cloud and containerized workloads.

Required Qualifications and Experience

• Minimum of 8 years in security engineering or platform engineering with a focus on cloud security.
• Practical experience securing production environments on AWS and GCP platforms.
• Expertise in Infrastructure as Code practices, especially using Terraform.
• In-depth knowledge of Kubernetes security, with skills in managing Helm deployments and GitOps workflows.
• Proficiency in programming languages Go and TypeScript; Python for automation tasks is a plus.
• Experience integrating security measures within Continuous Integration and Continuous Deployment (CI/CD) pipelines.
• Certifications required: Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS).
• Preferred certifications include AWS Certified Security, Google Professional Cloud Security Engineer, and HashiCorp Certified: Terraform Associate.
• Familiarity with Policy-as-Code frameworks such as Open Policy Agent (OPA) is advantageous.
• Experience with securing service mesh technologies, particularly Istio, and a background in software or platform engineering prior to specializing in security.

Equal Opportunity and Hiring Information

We are committed to fostering a diverse and inclusive workforce. Employment decisions at Agoda are made based on qualifications and merit without regard to demographic characteristics or personal identities. Candidates' applications remain on file for consideration for suitable future roles and can be removed upon request. Note that unsolicited agency submissions and speculative CVs will not be acknowledged with recruitment fees.