Application Security Analyst, Security Team (Bangkok-based, 10-month Contract)

About Agoda

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.

No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.

Get to Know Our Team

The Security Department oversees security, compliance, governance, risk, and security operations across Agoda. The team works to identify, assess, and reduce security risks that could affect Agoda’s products, platforms, employees, or customers. This role is a 10-month contract based in Bangkok, Thailand, and the successful candidate will be assigned to support application security initiatives and related security projects.

The Opportunity

As an Application Security Analyst, you will work with experienced security professionals to help identify, triage, and track application security findings across Agoda’s technology environment. You will support vulnerability management, security assessments, secure development activities, and risk analysis while gaining hands-on experience with modern application security processes, tooling, and cloud-based engineering practices.

In This Role, You’ll Get To

• Help triage, validate, and track application security findings, working with engineering and product teams to support timely remediation.
• Participate in vulnerability assessments, code reviews, and penetration testing activities under the guidance of senior security team members.
• Research security issues, analyze potential impact, and help document risk in a clear and actionable way.
• Support OWASP-based application security assessments across web applications, APIs, backend services, and related technology stacks.
• Use security tools and platforms to review findings, monitor remediation status, and maintain accurate security records.
• Collaborate with Security, Engineering, IT, and business stakeholders to ensure security issues are communicated clearly and handled effectively.