Senior/Staff Application Security Analyst (Bangkok based, relocation provided)

Agoda; Manchester; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Agoda is seeking a Senior/Staff Application Security Analyst based in Bangkok, with support for relocation. This role involves enhancing security measures through vulnerability management, penetration testing, and collaboration with DevSecOps teams. Join a diverse and innovative culture focused on securing Agoda's systems.

Benefits

Relocation support

Hybrid work

WFH allowance

Global employee discounts

Wellness programs

Professional development programs

Qualifications

• 5+ years in information security, focusing on penetration testing.
• At least 1 year managing a bug bounty platform.
• 2+ years in cloud environments such as AWS, GCP, or Azure.

Responsibilities

• Develop security automation tools and solutions at scale.
• Perform security assessments, code reviews, and vulnerability assessments.
• Triaging security findings and coordinating remediation efforts.

Skills

Penetration Testing

Vulnerability Management

Cloud Security

Programming (Python, Go, Node.js)

Web App Security

Tools

Security Assessment Tools

Analytics Platforms

Job description

Senior/Staff Application Security Analyst (Bangkok based, relocation provided)

Join Agoda as a Senior/Staff Application Security Analyst in Bangkok, with relocation support provided.

About Agoda: Agoda is a leading online travel booking platform connecting travelers with over 4.7 million hotels, flights, and activities worldwide. Part of Booking Holdings, we foster a diverse and innovative culture with over 7,100 employees from 95+ nationalities across 27 markets.

Team & Role: Our Security Department manages security, governance, risk management, and compliance to safeguard Agoda. As a Security Analyst, you will focus on identifying, analyzing, and remediating vulnerabilities, conducting penetration testing, and enhancing our security posture.

Responsibilities include:

• Developing security automation tools and solutions at scale
• Triaging security findings and coordinating remediation efforts
• Performing security assessments, code reviews, vulnerability assessments, and penetration testing
• Researching vulnerabilities and adjusting security controls accordingly
• Managing vulnerability programs, bug bounty initiatives, and penetration testing
• Developing security training for developers
• Collaborating with DevSecOps teams to integrate security tools into CI/CD pipelines

Minimum qualifications:

• 5+ years in information security, with experience in penetration testing and vulnerability management
• At least 1 year managing a bug bounty platform
• 2+ years in cloud environments (AWS, GCP, Azure, etc.)
• Experience with security testing, code review, and web app security
• Proficiency in programming languages like Python, Go, Node.js
• Knowledge of security assessment tools and analytics platforms

Preferred skills:

• Knowledge of container security, fuzzing, license scanning
• Experience with incident response and 0-day vulnerabilities
• Relevant security certifications

Benefits include relocation support, hybrid work, WFH allowance, global employee discounts, and various wellness and professional development programs.

Equal Opportunity: Agoda values diversity and is committed to an inclusive environment, hiring based on merit without discrimination.

Note: This job is active and accepting applications.