Senior/Staff Application Security Analyst

Overview

Senior/Staff Application Security Analyst (Bangkok based, relocation provided) - Agoda

About Agoda

About Agoda
Agoda is an online travel booking platform for accommodations, flights, and more. We build and deploy cutting-edge technology that connects travelers with a global network of 4.7M hotels and holiday properties worldwide, plus flights, activities, and more. Based in Asia and part of Booking Holdings, our 7,100+ employees representing 95+ nationalities in 27 markets foster a work environment rich in diversity, creativity, and collaboration. We innovate through a culture of experimentation and ownership, enhancing the ability for our customers to experience the world.

The Opportunity

• As a Security Analyst, you will focus on identifying, analyzing, and remediating vulnerabilities across our environment. You will be hands-on with penetration testing and vulnerability management, ensuring our systems remain secure and resilient.

What you’ll do

• Develop Security Automation Tools to implement solutions at scale.
• Triage security findings from multiple tools and coordinate with hundreds of teams to remediate within the right SLA.
• Conduct security assessments through code reviews, vulnerability assessments, penetration testing, and risk analysis.
• Research the negative effects of a vulnerability, from minimizing impact to adjusting security controls for prevention.
• Identify potential threats to protect the organization from malicious actors (Vulnerability Management, Bug Bounty Program, Penetration Testing).
• Develop Security Trainings for developers.
• Collaborate with the DevSecOps team to integrate tools into CI/CD and fine-tune rules and precision.

What you’ll Need to Succeed

• 5+ years in information security
• 5+ years of experience with Penetration Testing (Web, Infra, Mobile, APIs) and Vulnerability Management
• Minimum 1 year of experience running a bug bounty program
• Minimum 2 years of experience with any public/private cloud environments (OpenShift, Rancher, Kubernetes, AWS, GCP, Azure, etc.)
• Experience performing security testing (code reviews and web application security testing)
• Familiarity with GitLab, DefectDojo, JIRA, Confluence
• Proficient in one or more programming languages (e.g., Python, Go, Node.js)
• Familiar with analytics platforms and databases (GraphQL, REST APIs, PostgreSQL, MSSQL, Kafka, Hadoop, S3, etc.)
• Strong knowledge of security assessment tools (Nessus, Acunetix and similar platforms) and fuzzers

It’s great if you have

• Knowledge in Container Image Security, Dependency Checking, Fuzzing and License Scanning
• Familiarity with security incident response processes and 0-days
• Security Certifications
• Relocation package is provided for Bangkok, Thailand
• Hybrid working model
• WFH setup allowance
• 30 days of remote working from anywhere globally every year
• Employee discounts for accommodation globally
• Global team of 90+ nationalities
• 40+ offices and 25+ countries
• Annual CSR / Volunteer Time Off
• Benevity subscription for employee donations
• Volunteering opportunities globally
• Free Headspace subscription
• Free Odilo & Udemy subscriptions
• Access to Employee Assistance Program
• Enhanced Parental Leave
• Life, TPD & Accident Insurance

Relocation and Benefits

Relocation package is provided if you choose to relocate to Bangkok, Thailand. Our benefits include Hybrid working model, remote work allowances, and other employee programs listed above.

Equal Opportunity Employer

At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

Disclaimer

We do not accept unsolicited terms or any agency submissions. If we receive unsolicited CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Technology, Information and Internet

#J-18808-Ljbffr

---