Senior Security Engineer

Who you are

You have 5+ years of experience in security engineering, with a strong focus on cloud environments. Your expertise includes securing AWS and GCP deployments, and you are well-versed in Infrastructure as Code practices. You have a solid understanding of Kubernetes security and are familiar with GitOps workflows. Your programming skills in Go and TypeScript enable you to design and build custom security tooling effectively.

You thrive in collaborative environments, working closely with engineering teams to implement security controls. Your experience with security automation and tooling allows you to streamline processes and enhance security measures. You are proactive in identifying potential vulnerabilities and misconfigurations, ensuring that security is integrated into the development lifecycle.

Desirable

Experience with third-party security products within the Kubernetes ecosystem is a plus. Familiarity with CI/CD pipelines and security best practices will help you excel in this role. You are passionate about staying updated with the latest security trends and technologies, continuously seeking to improve your skills and knowledge.

What you'll do

In this role, you will design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform. You will deploy and manage both internal and third-party security products within the Kubernetes ecosystem, ensuring that security measures are effectively integrated into the development process. Your responsibilities will include working with GitOps workflows using tools like Argo CD and Flux, and Helm charts to automate security deployments.

You will also focus on security automation and tooling, designing and building security services that enhance the overall security posture of the organization. Misconfiguration management will be a key aspect of your role, as you will identify and remediate security misconfigurations across cloud environments. You will collaborate with engineering teams to ensure that security best practices are followed throughout the development lifecycle.

Your role will involve continuous monitoring and assessment of security controls, providing recommendations for improvements and enhancements. You will participate in incident response activities, helping to investigate and remediate security incidents as they arise. Additionally, you will contribute to the development of security policies and procedures, ensuring compliance with industry standards and regulations.

What we offer

Agoda offers a dynamic work environment where you can make a significant impact on the security of our cloud and platform environments. You will have the opportunity to work with cutting-edge technologies and collaborate with a diverse team of professionals. We encourage you to apply even if your experience doesn't match every requirement, as we value curiosity and a growth mindset. Join us in building a secure travel platform that connects people to destinations and experiences worldwide.