Security Analyst (Bangkok-based, 10-month Contract)

About Agoda

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.

Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.

No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.

Get to Know our Team:

The Security Department oversees security, compliance, GRC, and security operations for all Agoda. We are vigilant in ensuring there is no breach or vulnerability threatening our company or endangering our employees in order to keep Agoda safe and protected. This would be a great challenge for those who want to work with the best technology in a dynamic and advanced environment.

This role is a 10-month contract based in Bangkok, Thailand and the succeeded candidate will be assigned to the project.

The Opportunity:

You will be working with a diverse group of expert security professionals from different parts of the world, pooling in years of experience in securing software products and corporate environments.

In this Role, you'll get to:

• Learn and apply core Identity and Access Management (IAM) concepts - how digital identities are created, managed, and secured across an organization
• Get hands-on experience with Okta & Entra ID — managing users, groups, SSO configurations, and MFA policies
• Handle support tickets related to user access requests, application provisioning/deprovisioning, and access troubleshooting
• Assist in deploying and maintaining IAM infrastructure using Terraform, following infrastructure-as-code best practices
• Contribute to automation of repetitive IAM tasks (e.g., user lifecycle management, access reviews, provisioning workflows) using scripting or low-code tools
• Collaborate with IT, Security, and business teams to ensure access controls meet compliance and security standards

What you'll need to succeed:

• Bachelor's degree in IT, Computer Science, or a related field
• Fresh graduates are welcome — preferably less than two years of experience
• Basic understanding of what IAM is — identity lifecycle, access control, authentication vs. authorization
• Familiarity with at least one directory or identity platform: Microsoft Entra ID, Okta, or Active Directory
• Basic scripting skills (Python, Go) to support automation tasks
• A security-first mindset — understanding why the right people should only have the right access
• Good English communication skills — written and verbal
• Eager to learn fast and take ownership of tasks

It's Great if you have:

• Practical experience or coursework with Microsoft Entra ID / Azure AD or Okta (user management, app integrations, conditional access)
• Working knowledge of Active Directory — managing OUs, group policies, or user provisioning
• Exposure to Terraform for deploying cloud or IAM infrastructure
• Experience writing automation scripts to streamline access provisioning or reporting
• Familiarity with RBAC / ABAC concepts (Role-Based or Attribute-Based Access Control)
• Knowledge of CI/CD pipelines