Senior/Staff Application Security Engineer

You will be part of the Security Department at Agoda, where you will be responsible for ensuring the safety and protection of Agoda's systems and employees. You will have the opportunity to conduct application security reviews, perform penetration testing, and engage in projects to enhance security measures and meet compliance standards. Your role will also involve scaling security processes using automation, providing training and documentation for internal teams, and offering technical guidance to empower engineering partners with cutting-edge tools and methodologies. **Key Responsibilities:** - Conduct application security reviews and perform penetration testing to ensure compliance with standards - Engage in projects, research, and security tool development to enhance security measures - Scale security processes through automation - Provide training, outreach, and develop documentation for internal teams - Offer technical guidance, evaluate designs, and lead security teams to empower engineering partners with cutting-edge tools and methodologies **Qualifications Required:** - Strong foundations in secure design reviews, threat modeling, code reviews, and pen-testing - Minimum of 3 years of technical experience in threat modeling, secure coding, identity management, software development, cryptography, system administration, or network security - Minimum 2 years experience with Software Development Life Cycle in languages such as Go, Python, Nodejs, Rust, etc. - Experience with public/private cloud environments like Openshift, Rancher, K8s, AWS, GCP, Azure, etc. - In-depth knowledge of security principles, compliance regulations, and change management - Experience with OWASP MASVS and ASVS assessments, application vulnerabilities, and automated dynamic scanners - Analytical mindset for problem-solving and offensive security tactics - Effective communication skills to convey technical concepts to various audiences - Exposure to advanced AI and Large Language Model (LLM) security In addition to the challenging role, Agoda offers a variety of benefits including a relocation package to Bangkok, Thailand, a hybrid working model, WFH Set Up Allowance, 30 days of remote working globally, employee discounts for accommodation, and volunteering opportunities. You will be part of a global team with 90+ nationalities, with offices in 40+ locations across 25 countries, and access to various subscriptions and support programs. Agoda is an Equal Opportunity Employer and your application will be kept on file for future vacancies. If you have any concerns regarding your details, you can always request to have them removed from the file.,