1 day ago
Bangkok, ThailandStaff+
Responsibilities
- Develop and design application-level security controls and standards.
- Perform application security design reviews for new products and services.
- Track and prioritize security issues and drive remediation of discovered vulnerabilities.
- Build internal security tools to address security problems at scale.
- Conduct code reviews and enable automated security testing across web, mobile, and microservice platforms.
- Measure vulnerabilities, report risk, and execute security tests across on-premise and public cloud data centers.
Requirements
- Minimum seven years of technical experience in areas including threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security.
- At least two years of Software Development Life Cycle experience in one or more languages such as Rust, Python, Go, or Node.js.
- At least one year of experience with public or private cloud environments such as OpenShift, Rancher, Kubernetes, AWS, GCP, or Azure.
- Strong software engineering foundations and a strong background in threat modeling.
- Experience conducting assessments using OWASP MASVS and ASVS.
- Working knowledge of exploiting and fixing application vulnerabilities and common web application vulnerabilities, including the OWASP Top 10.
- Familiarity with automated dynamic scanners, fuzzers, and proxy tools.
- Analytical problem-solving skills, abstract thinking, offensive security tactics, and effective verbal and written communication.
Benefits
- Hybrid working model and work-from-home setup allowance.
- Up to 30 days of remote working from anywhere globally each year.
- Relocation package available for relocation to Bangkok, Thailand.
- Global accommodation employee discounts, insurance coverage, enhanced parental leave, and employee assistance support.
- Annual CSR or volunteer time off, donation and volunteering opportunities, and subscriptions to Headspace, Odilo, and Udemy.
Tech Stack
Categories
About Agoda
Agoda is a global online travel platform for booking hotels, homes, flights, and activities, serving travelers and accommodation partners worldwide. Its web and mobile marketplace matches demand and supply and monetizes through commissions and related partner services. Founded in 2005 and headquartered in Singapore, Agoda operates as a subsidiary of Booking Holdings, with extensive operations across Asia-Pacific markets.