Senior/Staff Application Security Analyst

Overview
Senior/Staff Application Security Analyst (Bangkok based, relocation provided) - Agoda
About Agoda
About Agoda
Agoda is an online travel booking platform for accommodations, flights, and more. We build and deploy cutting-edge technology that connects travelers with a global network of 4.7M hotels and holiday properties worldwide, plus flights, activities, and more. Based in Asia and part of Booking Holdings, our 7,100+ employees representing 95+ nationalities in 27 markets foster a work environment rich in diversity, creativity, and collaboration. We innovate through a culture of experimentation and ownership, enhancing the ability for our customers to experience the world.
The Opportunity
As a Security Analyst, you will focus on identifying, analyzing, and remediating vulnerabilities across our environment. You will be hands-on with penetration testing and vulnerability management, ensuring our systems remain secure and resilient.
What you’ll do
Develop Security Automation Tools to implement solutions at scale.
Triage security findings from multiple tools and coordinate with hundreds of teams to remediate within the right SLA.
Conduct security assessments through code reviews, vulnerability assessments, penetration testing, and risk analysis.
Research the negative effects of a vulnerability, from minimizing impact to adjusting security controls for prevention.
Identify potential threats to protect the organization from malicious actors (Vulnerability Management, Bug Bounty Program, Penetration Testing).
Develop Security Trainings for developers.
Collaborate with the DevSecOps team to integrate tools into CI/CD and fine-tune rules and precision.
What you’ll Need to Succeed
5+ years in information security
5+ years of experience with Penetration Testing (Web, Infra, Mobile, APIs) and Vulnerability Management
Minimum 1 year of experience running a bug bounty program
Minimum 2 years of experience with any public/private cloud environments (OpenShift, Rancher, Kubernetes, AWS, GCP, Azure, etc.)
Experience performing security testing (code reviews and web application security testing)
Familiarity with GitLab, DefectDojo, JIRA, Confluence
Proficient in one or more programming languages (e.g., Python, Go, Node.js)
Familiar with analytics platforms and databases (GraphQL, REST APIs, PostgreSQL, MSSQL, Kafka, Hadoop, S3, etc.)
Strong knowledge of security assessment tools (Nessus, Acunetix and similar platforms) and fuzzers
It’s great if you have
Knowledge in Container Image Security, Dependency Checking, Fuzzing and License Scanning
Familiarity with security incident response processes and 0-days
Security Certifications
Relocation package is provided for Bangkok, Thailand
Hybrid working model
WFH setup allowance
30 days of remote working from anywhere globally every year
Employee discounts for accommodation globally
Global team of 90+ nationalities
40+ offices and 25+ countries
Annual CSR / Volunteer Time Off
Benevity subscription for employee donations
Volunteering opportunities globally
Free Headspace subscription
Free Odilo & Udemy subscriptions
Access to Employee Assistance Program
Enhanced Parental Leave
Life, TPD & Accident Insurance
Relocation and Benefits
Relocation package is provided if you choose to relocate to Bangkok, Thailand. Our benefits include Hybrid working model, remote work allowances, and other employee programs listed above.
Equal Opportunity Employer
At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
Disclaimer
We do not accept unsolicited terms or any agency submissions. If we receive unsolicited CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
Seniority level
Mid-Senior level
Employment type
Full-time
Job function
Information Technology
Industries
Technology, Information and Internet
#J-18808-Ljbffr