Security Engineer (Bangkok Based, Relocation Support)

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.

Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.

No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.

We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript.

**Key Responsibilities:**

Secure Cloud Deployment:

* Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.

* Kubernetes & GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.

* Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.

* Security Automation & Tooling: Design and build security tooling and services using Go and TypeScript.

* Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.

* Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.

* Threat Detection & Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.

**Required Skills & Experience:**

* 8+ years of experience in security engineering, cloud security, or platform engineering roles.

* Hands-on experience securing production workloads in AWS and GCP.

* Strong experience designing and securing Infrastructure as Code using Terraform.

* Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.

* Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.

* Experience embedding security controls into CI/CD pipelines.

* Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate

* Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).

* Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.

Secure Cloud Deployment:

* Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.

* Kubernetes & GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.

* Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.

* Security Automation & Tooling: Design and build security tooling and services using Go and TypeScript.

* Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.

* Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.

* Threat Detection & Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.

* 8+ years of experience in security engineering, cloud security, or platform engineering roles.

* Hands-on experience securing production workloads in AWS and GCP.

* Strong experience designing and securing Infrastructure as Code using Terraform.

* Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.

* Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.

* Experience embedding security controls into CI/CD pipelines.

* Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate

* Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).

* Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.

Please review our Hiring Process Guidelines before your interview — click [here](https://careersatagoda.com/interview/)to learn how interviewing at Agoda works.