Security Engineer (Bangkok Based, Relocation Support)📣 Job Ad

About the Role

Agoda, a prominent global travel platform and part of Booking Holdings, is seeking an experienced Security Engineer to join its team. The company connects millions of travelers with accommodations, flights, and experiences worldwide, driven by data and technology with a culture of curiosity and innovation. This full-time position is based in Mecca, Saudi Arabia, and offers relocation support. The Security Engineer will play a vital role in securing Agoda's cloud and platform environments by collaborating with engineering teams to build, review, and operate robust security controls.

This hands-on role emphasizes the use of Infrastructure as Code, Kubernetes, and custom security services to strengthen the company's security posture. The engineer will be instrumental in designing and implementing security solutions to protect critical cloud infrastructure and applications, ensuring the integrity and safety of services.

Key Responsibilities

• Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
• Deploy and manage internal and third-party security products within the Kubernetes ecosystem.
• Work with GitOps workflows, utilizing tools such as Argo CD, Flux, and Helm charts for streamlined deployments and management.
• Design and build security tooling and custom security services using Go and TypeScript to automate security processes and enhance detection capabilities.
• Proactively identify, analyze, and remediate cloud misconfigurations to maintain a secure environment.
• Provide expert guidance to Engineering teams on secure cloud architecture best practices.
• Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within cloud and container workloads, enabling effective threat detection and response.

Qualifications and Experience

• A minimum of 10 years of experience in security engineering, cloud security, or platform engineering roles.
• Demonstrated hands-on experience securing production workloads in both AWS and GCP environments.
• Strong experience in designing and securing Infrastructure as Code using Terraform.
• Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
• Proficiency in programming languages such as Go and TypeScript, with Python utilized for automation where appropriate.
• Experience embedding security controls into CI/CD pipelines to ensure security is integrated throughout the development lifecycle.
• Certified Kubernetes Administrator (CKA) and Certified Kubernetes Security Specialist (CKS) are required.
• Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA) is preferred.
• Experience securing service mesh environments, specifically Istio, is a plus.
• A background in software engineering or platform engineering prior to moving into a security role is advantageous.

Technical Skills

• Security Engineering
• Cloud Security
• Platform Engineering
• AWS
• GCP
• Terraform
• Kubernetes
• GitOps
• Argo CD
• Flux
• Helm
• Go
• TypeScript
• Python
• CI/CD
• Open Policy Agent (OPA)
• Service Mesh
• Istio
• Software Engineering

Work Location and Support

This is a full-time position based in Mecca, Saudi Arabia. Relocation support is provided for this role, facilitating the transition for qualified candidates.