Bangkok, Thailand
Estimated range. Confirm compensation with the employer.
We check listings for employer identity, role clarity, and application links before publishing.
Listing record updated: October 7, 2026. We archive records after 60 days without an update. This date does not confirm that the employer is still hiring.
Wondering if your experience matches this role? Upload your CV to see matched skills, a fit score, and areas to develop.
Agoda is hiring a Lead Application Security Engineer to join its Security Department in Bangkok, Thailand, supporting security, compliance, and security operations across the company. The role sits in a fast-paced DevSecOps environment and focuses on integrating security testing into continuous deployment and integration flows, while performing design reviews, code review, and remediation at scale.
The position requires strong software engineering foundations with at least 7 years of technical experience across areas such as threat modeling, secure coding, authentication, and network security, plus hands-on cloud and SDLC experience. Candidates are expected to work with microservices, web, and mobile platforms across on-premise and public cloud data centers.
Play a lead role in developing and designing application-level security controls and standards
Perform application security design reviews against new products and services
Track and prioritize all security issues
Build internal security tools that help fix security problems at scale
Perform code review and drive remediation of discovered issues
Strong foundations in software engineering
Minimum 7 years of technical experience in threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
Minimum 2 years SDLC experience in languages such as Rust, Python, Go, or Node.js
Minimum 1 year experience with public/private cloud environments (Openshift, Rancher, K8s, AWS, GCP, Azure)
In-depth knowledge of common web application vulnerabilities such as OWASP Top 10
Experience running assessments using OWASP MASVS and ASVS; familiarity with automated dynamic scanners, fuzzers, and proxy tools; offensive security tactics
Job listings are sourced from company websites and career pages. Learn more about how we source jobs.
Bangkok Jobs is not affiliated with the hiring companies. Please verify all job details directly with the employer before applying. We are not responsible for the accuracy of job postings or hiring decisions.