At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide. No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us. **Senior Security Operations Engineer:** We are seeking a hands-on Senior Security Operations Engineer to operate and improve key enterprise security platforms across endpoint, server, network, and secure access environments. This role will work closely with infrastructure, network, IT, and engineering teams to strengthen security operations, improve service reliability, and drive automation across critical security technologies. **Key Responsibilities:** * Design, build, and optimize CrowdStrike across user devices and server environments; define and enforce sensor policies, detection tuning, and response playbooks. * Administer and support Zscaler ZIA, ZDX, and ZPA. Manage policy lifecycles, tunnel configurations, app connector health, and user experience monitoring. * Troubleshoot and resolve issues related to network connectivity, VPN, secure access, and SASE services. * Support security operations activities, incident handling, and root cause analysis across managed platforms. * Use APIs and scripting to automate routine tasks, reporting, and platform integrations. * Deploy and manage security platform configurations through Terraform and CI/CD pipelines, following IaC best practices and change management processes. * Apply generative AI use cases to improve operational workflows, troubleshooting, and team productivity. **Required Skills and Experience:** * 7+ years of experience in security operations, endpoint security, network security, or security engineering roles. * Hands-on experience with CrowdStrike for both user devices and servers. * Strong knowledge of Zscaler ZIA, ZDX, and ZPA or other SASE solutions. * Experience in troubleshooting network, VPN, and SASE-related issues in enterprise environments. * Familiarity with APIs, scripting, Terraform, and CI/CD pipelines. * Strong problem-solving skills and the ability to collaborate across multiple technical teams. #### Please review our Hiring Process Guidelines before your interview — click [here](https://careersatagoda.com/interview/)to learn how interviewing at Agoda works.

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide. No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us. We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript. **Key Responsibilities:** Secure Cloud Deployment: * Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform. * Kubernetes & GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem. * Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts. * Security Automation & Tooling: Design and build security tooling and services using Go and TypeScript. * Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations. * Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture. * Threat Detection & Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads. **Required Skills & Experience:** * 8+ years of experience in security engineering, cloud security, or platform engineering roles. * Hands-on experience securing production workloads in AWS and GCP. * Strong experience designing and securing Infrastructure as Code using Terraform. * Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows. * Strong programming skills in Go and TypeScript, with Python used for automation where appropriate. * Experience embedding security controls into CI/CD pipelines. * Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate * Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA). * Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide. No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us. We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript. **Key Responsibilities:** Secure Cloud Deployment: * Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform. * Kubernetes & GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem. * Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts. * Security Automation & Tooling: Design and build security tooling and services using Go and TypeScript. * Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations. * Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture. * Threat Detection & Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads. **Required Skills & Experience:** * 8+ years of experience in security engineering, cloud security, or platform engineering roles. * Hands-on experience securing production workloads in AWS and GCP. * Strong experience designing and securing Infrastructure as Code using Terraform. * Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows. * Strong programming skills in Go and TypeScript, with Python used for automation where appropriate. * Experience embedding security controls into CI/CD pipelines. * Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate * Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA). * Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.

Agoda is seeking a Senior Security Operations Engineer to operate and improve key enterprise security platforms across endpoint, server, network, and secure access environments. The role involves working closely with infrastructure, network, IT, and engineering teams to strengthen security operations, improve service reliability, and drive automation across critical security technologies. The engineer will design and optimize CrowdStrike, administer Zscaler ZIA, ZDX, and ZPA, and troubleshoot network connectivity and VPN issues. The position requires using APIs and scripting to automate tasks and deploying configurations through Terraform and CI/CD pipelines.

As a Security Sales Specialist supporting our business, you will help us grow our cybersecurity business by building and expanding relationships with new and existing customers. In this role, you will work with customers to deliver true business value, demonstrate product functionality, and provide a comprehensive overview of key business use cases. You will lead day-to-day relationships with cross-functional team members and external customers, leading with empathy, while identifying ways to multiply your impact and the impact of the team as a whole to drive overall value for Google Cloud. Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

You will engage with various teams to drive meaningful outcomes by providing thoughtful solutions to challenges. This role involves sharing your expertise in SAP Security Roles & Auth Design for Segregation of Duties. You will collaborate with cross-functional groups to ensure seamless integration of solutions and analyze business requirements to translate them into effective technical designs. Join us to be part of a dynamic setting where your insights will truly make a difference. You will develop and implement business solutions that align with industry standards and organizational goals. The position requires you to design functional and application frameworks that support current and future business needs. You will continuously evaluate and enhance security roles and authorizations to maintain compliance and efficiency while fostering a collaborative environment where innovation and problem-solving thrive.

We are seeking a People Technology Security Specialist to strengthen the security framework across our People Team platforms. This role focuses on ensuring secure access and data governance within Workday (HRIS), while supporting related systems such as Greenhouse (ATS), Zendesk, and Tableau. You will collaborate closely with IT Security, internal and external audit teams, the Data Privacy team, and the Employee Relations team to drive ongoing improvements to our security framework. This position involves supporting employee and candidate-related audits, ensuring compliance with GDPR and other data protection regulations, and broadening your expertise across the functional aspects of People systems. In this role, you will take ownership of the security architecture for the People Team across all platforms, including Workday, Greenhouse, Zendesk, and Tableau. You will design, implement, and maintain secure access controls, role-based permissions, and cross-platform security standards. You will also lead efforts to continuously improve people data handling workflows by identifying process gaps, implementing best practices, and leveraging technology to optimize efficiency and data integrity. Additionally, you will support, mentor, and potentially lead junior team members, fostering a growth mindset and driving a culture of continuous improvement.

You will be responsible for identifying and mitigating security vulnerabilities and threats within the organization's IT systems. This role requires continuous monitoring, threat intelligence analysis, and vulnerability assessments to develop strategies that minimize security risks. You will collaborate with IT and security teams to implement security patches and measures, ensuring the protection of critical assets and infrastructure. You will perform vulnerability assessments and penetration testing to identify weaknesses in the organization's IT infrastructure. Additionally, you will investigate known indicators, correlate events, and discover new sources to provide early warning for a variety of threats. You will also create reports and provide recommendations for mitigating vulnerabilities and improving overall security posture.

We are looking for an Offensive Security Engineer to proactively identify, validate, and prioritize security vulnerabilities across applications, infrastructure, and cloud environments. This role requires a deep understanding of red teaming, penetration testing, and threat-informed analysis. You will leverage modern automation and AI-assisted security techniques to enhance detection and remediation outcomes. The position involves hands-on work with web, API, network, cloud, mobile, and LLM environments to ensure robust security posture. You will utilize security tools such as Burp Suite, Nmap, Metasploit, Nessus/Qualys, and cloud security tools to perform manual exploitation beyond automated scanning. The role demands strong knowledge of OWASP Top 10, MITRE ATT&CK, and modern application architectures to understand common attack techniques and vulnerability chaining. You will assess and prioritize security risks based on technical severity and business impact, communicating findings effectively to engineering teams and executives.

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide. No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us. About Agoda At Agoda, we bridge the world through travel. Since 2005, Agoda has helped make travel easier and more rewarding for everyone. Today, we are part of Booking Holdings and operate with a diverse global team across offices worldwide, using data, technology, and experimentation to connect people with destinations and experiences. Get to Know Our Team The Security Department oversees security, compliance, governance, risk, and security operations across Agoda. The team works to identify, assess, and reduce security risks that could affect Agoda’s products, platforms, employees, or customers. This role is a 10-month contract based in Bangkok, Thailand, and the successful candidate will be assigned to support application security initiatives and related security projects. The Opportunity As an Application Security Analyst, you will work with experienced security professionals to help identify, triage, and track application security findings across Agoda’s technology environment. You will support vulnerability management, security assessments, secure development activities, and risk analysis while gaining hands-on experience with modern application security processes, tooling, and cloud-based engineering practices. In This Role,You’ll Get To * Help triage,validate, and track application security findings, working with engineering and product teams to support timely remediation. * Participate in vulnerability assessments, code reviews, and penetration testing activities under the guidance of senior security team members. * Research security issues, analyze potential impact, and help document risk in a clear and actionable way. * Support OWASP-based application security assessments across web applications, APIs, backend services, and related technology stacks. * Use security tools and platforms to review findings,monitor remediation status, and maintain accurate security records. * Collaborate with Security, Engineering, IT, and business stakeholders to ensure security issues are communicated clearly and handled effectively. #Bangkok #IT #entrylevel #### Please review our Hiring Process Guidelines before your interview — click [here](https://careersatagoda.com/interview/)to learn how interviewing at Agoda works. ### **Discover more about working at Agoda** * Agoda Careers[https://careersatagoda.com](https://careersatagoda.com/) * Facebook[https://www.facebook.com/agodacareers/](https://www.facebook.com/agodacareers/) * LinkedIn[https://www.linkedin.com/company/agoda](https://www.linkedin.com/company/agoda) * YouTube[https://www.youtube.com/agodalife](https://www.youtube.com/agodalife) **Equal Opportunity Employer** At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics. We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For details please read our [privacy policy](https://careersatagoda.com/privacy-statement). **Disclaimer** We do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee. ## Apply Now Application Security Analyst, Security Team (Bangkok-based, 10-month Contract) +93 School Select a School Degree Select a Degree Discipline Select a Discipline Start Date End Date Git projects Please let us know your approx. start date (dd/mm/yy) Please let us know your expected monthly salary range (THB). This role does not include visa sponsorship and is only open to people with current work authorization in Thailand. Are you able to legally work in Thailand without visa sponsorship? In which country/region are you currently based? Are you presently employed by any company within the Booking Holdings group, including but not limited to Kayak, OpenTable, Booking.com, Rental Cars, RocketMiles, FareHarbor, HotelsCombined, CheapFlights, Momondo, Priceline, or Getaroom? Do you allow us to provide you TEXT/SMS updates of your interview process? We may engage with a service provider to do so. How did you hear about this job? To avoid actual or perceived impairment of our parent company’s independent auditor – Deloitte and to comply with applicable regulations of Securities and Exchange Commission of the United States, we need to seek approvals from our parent company before starting the interview process. With this, please confirm if you are currently or formerly have been associated with Deloitte or any of its subsidiary entities at any time including but not limited to any time as a direct employee, director, contractor, major shareholder, intern etc.? We collect your gender information for diversity, equity & inclusion monitoring purposes. It is entirely voluntary to answer the question below. By choosing “prefer not to disclose”, your candidacy will not be impacted. Email me about other job openings within the Booking Holding’s entities and recruitment-related newsletters