AI security engineer — build secure AI & threat modeling

AGODA COMPANY PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Agoda is seeking an AI Security Engineer to join the AppSec Engineering team. You will design and operate AI-powered security systems, focusing on secure-by-design AI agents and scalable threat modeling across design reviews.

This role requires hands-on security engineering, knowledge of LLM risks, and experience securing agentic, production-grade systems. You will partner with product, data, and engineering teams and stay ahead of industry frameworks.

Qualifications

• 3+ years SDLC experience in Python, Go, TypeScript/Node.js, Kotlin or similar.
• 6+ years of experience in security engineering, AppSec, threat modeling, secure coding, IAM, or cloud security.
• 2+ years of cloud security and 1+ year building LLM applications, agents, MCP integrations, or evaluation pipelines.

Responsibilities

• Design, build, and operate AI-powered security engineering systems, end-to-end in production.
• Build AI-assisted threat modeling from design docs, flag high-risk changes, route reviews.
• Harden AI developer platforms (Cursor, Codex, Claude) and implement governance controls.
• Lead security design reviews and threat modeling for AI systems and agents.
• Define and implement security controls and guardrails for AI agents (identity, credentials, least privilege, sandboxing, human-in-the-loop).
• Develop defenses against AI-specific threats (prompt injection, data exfiltration, insecure output handling).
• Build agentic security tooling to automate AppSec workflows from intake to remediation.
• Measure and improve tooling quality (precision, coverage, false positives) and share learnings across teams.
• Collaborate with product, platform, data, and AI engineering as embedded security owner.
• Stay ahead of AI security research and industry frameworks.

Skills

Python

Go

TypeScript/Node.js

Kotlin

Security engineering

AppSec

Threat modeling

IAM

Cloud security

LLM security

Red-teaming

Job description

Agoda is seeking an AI Security Engineer to join the AppSec Engineering team. You will design and operate AI-powered security systems, focusing on secure-by-design AI agents and scalable threat modeling across design reviews.

This role requires hands-on security engineering, knowledge of LLM risks, and experience securing agentic, production-grade systems. You will partner with product, data, and engineering teams and stay ahead of industry frameworks.