Security Engineer (Bangkok Based, Relocation Support)

About the Company

At Agoda, we bridge the world through travel. Data and technology are at the heart of our culture, fueling curiosity and innovation. We are looking for a hands-on Senior Security Engineer to secure our cloud and platform environments and work closely with engineering teams to build, review, and operate security controls.

Responsibilities

• Design, implement, and manage secure cloud deployments across AWS and GCP using Terraform.
• Deploy and manage internal and third-party security products within the Kubernetes ecosystem.
• Work with GitOps workflows and tools such as Argo CD, Flux, and Helm charts.
• Design and build security tooling and services using Go and TypeScript; use Python for automation where appropriate.
• Proactively identify, analyze, and remediate cloud misconfigurations.
• Provide guidance to engineering teams on secure cloud and platform architecture.
• Build and optimize cloud-native detection rules and alerting pipelines to monitor suspicious activity in cloud and container workloads.
• Embed security controls into CI/CD pipelines and operational workflows.

Qualifications

• 8+ years of experience in security engineering, cloud security, or platform engineering roles.
• Hands-on experience securing production workloads in AWS and GCP.
• Strong experience designing and securing Infrastructure as Code using Terraform.
• Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
• Strong programming skills in Go and TypeScript; experience using Python for automation.
• Experience embedding security controls into CI/CD pipelines.
• Certifications (Required): Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS).
• Certifications (Preferred): AWS Certified Security Specialty, Google Professional Cloud Security Engineer, HashiCorp Certified: Terraform Associate.
• Nice-to-have: Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA), securing service mesh environments (Istio), and a background in software or platform engineering.

Additional Information

• Agoda is an equal opportunity employer and values diversity. Employment decisions are based on merit and qualifications.
• We retain applications on file for future vacancies and do not accept unsolicited third-party or agency submissions for this role.