Security Engineer (Bangkok Based, Relocation Support)

About Agoda

Role overview

Responsibilities

• Design, implement, and manage secure AWS and GCP deployments using Terraform.
• Deploy and manage internal and third-party security products in Kubernetes.
• Work with GitOps workflows using tools such as Argo CD and Flux, and with Helm charts.
• Build security tooling and services using Go and TypeScript.
• Identify, analyze, and remediate cloud misconfigurations.
• Guide engineering teams on secure architecture.
• Build and optimize detection rules and alerting pipelines for suspicious activity in cloud and container workloads.

Required skills and experience

• 8+ years in security engineering, cloud security, or platform engineering.
• Hands-on experience securing production workloads in AWS and GCP.
• Strong experience designing and securing Infrastructure as Code with Terraform.
• Deep Kubernetes security knowledge, including Helm troubleshooting and GitOps workflows.
• Strong Go and TypeScript programming skills; Python may be used for automation.
• Experience embedding security controls into CI/CD pipelines.
• CKA and CKS certifications are required.

Preferred qualifications

• AWS Certified Security Specialty, Google Professional Cloud Security Engineer, or HashiCorp Certified: Terraform Associate certifications are preferred.
• Experience with policy-as-code frameworks such as OPA, securing service mesh environments such as Istio, or a prior software or platform engineering background is nice to have.

Hiring process

• The employer directs candidates to review its hiring process guidelines before an interview.