The Section Manager - Penetration Tester is responsible for conducting security assessments across web applications, internal infrastructure, Active Directory, cloud environments, and networks to identify vulnerabilities. The role involves performing adversary emulation and purple team exercises with the SOC and Blue team to validate detection capabilities. The position requires preparing technical reports and presenting security findings and risks to stakeholders.
This role involves leading the implementation and maintenance of IAM/IGA platforms and managing a team of analysts and administrators. The manager will oversee user identity management, including account creation and access rights, and conduct regular access reviews and audits to ensure compliance. Responsibilities also include collaborating with application teams for new application onboarding and working with HR and business teams to resolve employee issues.
This role focuses on balancing exceptional delivery with business needs, serving as a first layer of management for people or projects. The professional will interpret IT risk and cybersecurity requirements, develop information security policies, and conduct technology risk assessments. They will manage the risk acceptance process, coordinate with audit stakeholders, and define security KPIs and KRIs to measure control effectiveness and governance maturity.
About the role
We are looking for a talented and motivated DevOps Engineer to join our team. In this role, you will be responsible for managing and optimizing our continuous integration and continuous deployment (CI/CD) processes, ensuring seamless software delivery and infrastructure management. You will collaborate with cross-functional teams to enhance our development and deployment processes, contributing to the overall efficiency and effectiveness of our software development lifecycle.
Job Description
* Infrastructure as Code: Design, implement, and maintain infrastructure using tools like Terraform, CloudFormation, or Ansible to manage cloud and on-premises resources.
* CI/CD Pipelines: Develop, manage, and improve CI/CD pipelines using tools such as Jenkins, GitLab CI to ensure reliable and efficient software delivery.
* Automation and Orchestration: Automate repetitive tasks and streamline workflows using scripting languages like Python, Bash, or PowerShell.
* Monitoring and Logging: Implement monitoring and logging solutions to ensure system health and performance, using tools like Prometheus, Telegraf, Grafana, ELK Stack.
* Collaboration: Work closely with development, QA, and operations teams to ensure smooth software releases and effective communication.
* Security: Integrate security practices into the DevOps processes, including vulnerability assessments, access control, and compliance with industry standards.
* Incident Management: Troubleshoot and resolve issues related to application and infrastructure performance, ensuring high availability and reliability.
* Cloud Services Management: Manage and optimize cloud services (e.g., AWS, Google Cloud) for performance, cost, and scalability.
* Documentation: Maintain clear and comprehensive documentation for processes, systems, and procedures.
Qaulifications
* Education: Bachelor’s degree in computer science, Engineering, or a related field, or equivalent practical experience.
* Experience: [Specify years of experience] years of experience in a DevOps or related role.
* Proficiency in scripting languages (e.g., Python, Bash, Powershell).
* Experience with infrastructure as code tools (e.g., Terraform, CloudFormation).
* Knowledge of CI/CD tools (e.g., Jenkins, GitLab CI).
* Familiarity with containerization and orchestration (e.g., Docker, Kubernetes).
* Strong understanding of cloud platforms (e.g., AWS, GCP).
* Experience with monitoring and logging tools (e.g., Prometheus, Grafana, ELK).
* Understanding of security best practices and tools.
Preferred
* Experience with serverless architectures and microservices.
* Experience in a fast-paced, agile development environment.
* Knowledge of network and security configurations in cloud environments.
* Strong problem-solving skills.
* Excellent communication and collaboration abilities.
* Ability to work independently and in a team.
* Certifications: e.g., AWS Certified DevOps Engineer, Google Professional DevOps Engineer are a plus.
At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.
About Agoda
At Agoda, we bridge the world through travel. Since 2005, Agoda has helped make travel easier and more rewarding for everyone. Today, we are part of Booking Holdings and operate with a diverse global team across offices worldwide, using data, technology, and experimentation to connect people with destinations and experiences.
Get to Know Our Team
The Security Department oversees security, compliance, governance, risk, and security operations across Agoda. The team works to identify, assess, and reduce security risks that could affect Agoda’s products, platforms, employees, or customers. This role is a 10-month contract based in Bangkok, Thailand, and the successful candidate will be assigned to support application security initiatives and related security projects.
The Opportunity
As an Application Security Analyst, you will work with experienced security professionals to help identify, triage, and track application security findings across Agoda’s technology environment. You will support vulnerability management, security assessments, secure development activities, and risk analysis while gaining hands-on experience with modern application security processes, tooling, and cloud-based engineering practices.
In This Role,You’ll Get To
* Help triage,validate, and track application security findings, working with engineering and product teams to support timely remediation.
* Participate in vulnerability assessments, code reviews, and penetration testing activities under the guidance of senior security team members.
* Research security issues, analyze potential impact, and help document risk in a clear and actionable way.
* Support OWASP-based application security assessments across web applications, APIs, backend services, and related technology stacks.
* Use security tools and platforms to review findings,monitor remediation status, and maintain accurate security records.
* Collaborate with Security, Engineering, IT, and business stakeholders to ensure security issues are communicated clearly and handled effectively.
#Bangkok #IT #entrylevel
#### Please review our Hiring Process Guidelines before your interview — click [here](https://careersatagoda.com/interview/)to learn how interviewing at Agoda works.
### **Discover more about working at Agoda**
* Agoda Careers[https://careersatagoda.com](https://careersatagoda.com/)
* Facebook[https://www.facebook.com/agodacareers/](https://www.facebook.com/agodacareers/)
* LinkedIn[https://www.linkedin.com/company/agoda](https://www.linkedin.com/company/agoda)
* YouTube[https://www.youtube.com/agodalife](https://www.youtube.com/agodalife)
**Equal Opportunity Employer**
At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For details please read our [privacy policy](https://careersatagoda.com/privacy-statement).
**Disclaimer**
We do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
## Apply Now
Application Security Analyst, Security Team (Bangkok-based, 10-month Contract)
+93
School
Select a School
Degree
Select a Degree
Discipline
Select a Discipline
Start Date
End Date
Git projects
Please let us know your approx. start date (dd/mm/yy)
Please let us know your expected monthly salary range (THB).
This role does not include visa sponsorship and is only open to people with current work authorization in Thailand. Are you able to legally work in Thailand without visa sponsorship?
In which country/region are you currently based?
Are you presently employed by any company within the Booking Holdings group, including but not limited to Kayak, OpenTable, Booking.com, Rental Cars, RocketMiles, FareHarbor, HotelsCombined, CheapFlights, Momondo, Priceline, or Getaroom?
Do you allow us to provide you TEXT/SMS updates of your interview process? We may engage with a service provider to do so.
How did you hear about this job?
To avoid actual or perceived impairment of our parent company’s independent auditor – Deloitte and to comply with applicable regulations of Securities and Exchange Commission of the United States, we need to seek approvals from our parent company before starting the interview process. With this, please confirm if you are currently or formerly have been associated with Deloitte or any of its subsidiary entities at any time including but not limited to any time as a direct employee, director, contractor, major shareholder, intern etc.?
We collect your gender information for diversity, equity & inclusion monitoring purposes. It is entirely voluntary to answer the question below. By choosing “prefer not to disclose”, your candidacy will not be impacted.
Email me about other job openings within the Booking Holding’s entities and recruitment-related newsletters
JLL is hiring a Fire Man for the Energy Complex center in Bangkok. The role supports firefighting operations, safety planning, and compliance with fire safety regulations at the site. Duties include inspecting fire equipment, conducting safety patrols, coordinating with government agencies, and participating in emergency drills.
The position also involves advising tenants on fire prevention, monitoring risk areas via CCTV, preparing daily/weekly/monthly reports, and assisting with emergency response planning. Candidates should have relevant fire safety experience and be able to work on-site in Bangkok.
JLL is hiring a Fire Safety Officer based on-site in Bangkok to support fire safety operations at the Energy Complex center. The role involves monitoring fire safety regulations, coordinating fire prevention activities, inspecting fire equipment, conducting safety patrols, and supporting emergency response planning. The position also includes preparing daily, weekly, and monthly reports and liaising with government agencies and tenants.
The role requires assisting with fire drills, training tenants on basic fire prevention, inspecting fire risk points via CCTV and on foot, and issuing corrective notices. Candidates should have experience in fire safety or firefighting operations, familiarity with fire protection equipment, and the ability to coordinate emergency situations and report to supervisors.
This role involves owning the end-to-end incident response lifecycle, acting as Incident Commander during major security events, and managing the SOC team's operational effectiveness. The manager will build and mature the incident response programme by developing scenario-specific playbooks, driving post-incident reviews, and executing tabletop exercises. Responsibilities include managing KPIs like MTTD and MTTR, maintaining threat intelligence pipelines, and coordinating with legal and compliance teams during regulatory incidents.
This role involves overseeing daily facility operations, including office readiness, maintenance, safety, security, cleaning, and vendor performance. The position requires identifying recurring issues, analyzing root causes, and implementing strategic solutions. The candidate will lead facility projects, process improvements, emergency preparedness, and incident response. Additionally, the role entails leading and guiding the Facility team and vendors, making independent decisions, and building strong relationships with stakeholders.
The Corporate IT team supports internal employees by delivering seamless IT experiences and responsive helpdesk services. The Helpdesk Engineer implements IT operations according to policy and interprets technical issues on both system and user sides. The role involves providing day-to-day technical support for computers, network devices, and printers, as well as handling asset management and maintaining office network infrastructure. The position requires covering after-office hours and weekends for infrastructure issues.
