387 Information Security jobs in Saudi Arabia

Help Ag is looking for a Cyber Threat Intelligence Analyst (TIA) who will be a part of the Cyber Defense team, responsible to help collect, analyze, and disseminate cyber intelligence impacting the company or its customers. The ideal candidate will be a professional with experience in cyber intelligence/cyber risk, delivering equivalent services to organizations, with drive and creativity. This is a fantastic opportunity for a passionate professional that wants to evolve in the Cyber Intelligence world. The position will involve essential duties and responsibilities that must continue to be performed during crisis situations and contingency operations, which may necessitate extended hours of work.

Responsibilities

• Identify, collect, and perform analysis of raw, primary, and secondary data derived from various sources.

• Create and update General Intelligence Requirements (GIR)s, Priority Intelligence Requirements (PIR)s, and Organization Specific Intelligence Requirements (OSIR)s for customers.

• Create threat profiles and threat landscapes for companies and or customers.

• Create diamond models around customers and threat adversaries.

• Improve the creation and delivery of intelligence information to customers and partners, via different reports and tools, linking the dots and adding value to the service delivered.

• Perform investigations on the internet and dark web on different topics, from broad investigations to specific searches.

• Identify, assess, and track tactics, techniques, and procedures of cyber threat actors.

• Provide threat review and validation to customers on their exposure to cyber security risks, threats, and potential impact.

• Provide actionable strategic, technical, and tactical cyber intelligence to company & its subsidiaries through weekly, monthly, and ad hoc reports, briefings, and presentations.

• Conduct Internet searches, in English and Arabic, to profile customers’ online presence and optimize data feeds into back end cyber threat harvesting and analysis solutions.

• Apply advanced search techniques (e.g., Boolean terms) in Google/Bing search engines, social sites, domain databases, darknet, etc. to reduce false positives.

• Support customers in take down efforts to remove fraudulent, offensive, and suspicious online content.

• Be up to date on knowledge of attacker tools/techniques, country and regional cyber threats, business, and political landscapes to reflect their context into detected/created threats to reduce false positives to help improve generated reports.

• Provide feedback and recommendations to Backend Cyber defense teams such as the MDR Team to enhance detection's (e.g., false positives, generic data, fine-tuning, updated info, etc.) and improve portal performance and/or experience.

• Understand customer industries to generate Arabic keywords to support searches of online Arabic content.

• Identify new information sources (English and Arabic), search keywords (English and Arabic) and best practices to achieve more accurate and customer related threat detection.

• When customers request ad-hoc investigations, assist in defining the investigation scope, delivery date and present the findings to the customer (report).

• Understand and perform analysis of competing hypotheses (ACH) for use in threat hunting and advisory production.

• Manage the life cycle of threat intelligence.

• Maintain a high degree of awareness of the current threat landscape.

• Assist in providing threat and vulnerability analysis as well as security advisory services.

• Participate in knowledge sharing with other Analysts and writing technical articles for Internal Knowledge Bases.

• Perform tasks independently with some oversight.

• Deliver Cyber Intelligence services.

• Research and craft analytic papers and deliver intelligence briefings under short deadlines on various geographical and functional topics.

• Use knowledge, creativity, and analytic tradecraft best practices to obtain solutions to complex problems.

Qualifications & Skills:

• A Degree in Computer Science, Information Systems, Electronics Engineering, or a closely related degree.

• 1 - 4 years’ experience as a TIA or related position.

• An active, demonstrable interest in cyber threat detection, and cyber threat intelligence.

• A thorough understanding of IT systems and network security concepts, network protocols.

• Thorough understanding of cyber threats and warfare such as Internet services attacks, User attacks, APTs, malicious mobile apps, online fraud, dark-net, hackers’ tools/techniques, hacktivist, etc.

• Knowledge of latest global cyber-attacks, prominent ransomware, APT groups.

• Demonstrable knowledge around GIR creations and threat profiling/landscaping.

• Demonstrable knowledge of cyber threat intelligence, threat actors, malware, tactics, techniques, and procedures (TTPs), intelligence analysis, use of diamond models and various security methodologies and processes.

• Demonstrable knowledge analysis of competing hypotheses (ACH) for evaluating multiple competing hypotheses for observed data.

• Deep knowledge of IT security best practices, common attack types, and detection/prevention methods.

• Demonstrable knowledge of cyber operational security, log analysis, netflow analysis, incident response, malware analysis, computer forensics, and/or cybercrime.

• Demonstrable knowledge on deep and dark web.

• Good understanding of the cyber kill chain or attack vectors.

• Excellent verbal and written communication skills including the ability to clearly articulate technical and strategic level cyber matters to a variety of audiences.

• Ability to multitask, prioritize, and manage time effectively.

• Strong attention to detail.

• Excellent interpersonal skills and professional demeanor.

• Excellent customer service skills.

• Formal Intelligence Analysis training & certifications like GCTI, GOSI, C|TIA, Security+, RCIA, CTIP, CPTIA, CRTIA, CTIS-I and or CTIS-II.

Benefits:

• Health insurance with one of the leading global providers for medical insurance.

• Career progression and growth through challenging projects and work.

• Employee engagement activities throughout the year.

• Tailored training & development program.

About Us:

Help AG is the cyber security arm of e& enterprise and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.

Present in the Middle East since 2004, Help AG was strategically acquired by Etisalat group in Feb 2020, hence creating a cyber security and digital transformation powerhouse in the region.

Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cyber security focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.

Overview

Senior Application Security Engineer (Bangkok based, relocation provided) – Agoda

Join to apply for the Senior Application Security Engineer (Bangkok based, relocation provided) role at Agoda .

• Play a lead role in developing and designing application-level security controls and standards.
• Perform application security design reviews against new products and services.
• Track and prioritize all security issues.
• Build internal security tools that help fix security problems at scale.
• Perform code review and drive remediation of discovered issues.
• Enable automated security testing at scale to measure vulnerability, and report on risk across all microservice, web and mobile platforms.
• Execute security tests on thousands of servers which are spread across on-premise and public cloud data centers.

• Strong foundations in software engineering.
• Minimum of 7 years of technical experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security.
• Minimum 2 years experience with Software Development Life Cycle in one or more languages (Rust, Python, Go, Node.js, etc.).
• Minimum 1 year experience with public/private cloud environments (OpenShift, Rancher, Kubernetes, AWS, GCP, Azure, etc.).
• Experience in running assessments using OWASP MASVS and ASVS.
• Working knowledge of exploiting and fixing application vulnerabilities.
• Strong background in threat modeling.
• In-depth knowledge of common web application vulnerabilities (OWASP Top 10).
• Familiarity with automated dynamic scanners, fuzzers, and proxy tools.
• Analytical problem-solver with offensive security mindset.
• Highly effective communication skills, in both verbal and written forms, to convey technical concepts to diverse audiences.
• Relocation package is provided for those who relocate to Bangkok, Thailand. Our benefits are.

• Hybrid Working Model
• WFH Set Up Allowance
• 30 Days of Remote Working from anywhere globally every year
• Employee discount for accommodation globally
• Global team of 90+ nationalities
• 40+ offices and 25+ countries
• Annual CSR / Volunteer Time off
• Benevity Subscription for employee donations
• Volunteering opportunities globally
• Free Headspace subscription
• Free Odilo & Udemy subscriptions
• Access to Employee Assistance Program (third party for personal and workplace support)
• Enhanced Parental Leave
• Life, TPD & Accident Insurance

Equal Opportunity Employer: Agoda prides itself on being a company represented by people of diverse backgrounds and orientations. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We may keep your application on file for future vacancies and you can request removal at any time by reading our privacy policy.

We do not accept unsolicited agency submissions. If we receive such submissions, we reserve the right to contact and hire the candidate directly without paying a recruitment fee.

Overview

Senior Application Security Engineer (Bangkok based, relocation provided) – Agoda

Join to apply for the Senior Application Security Engineer (Bangkok based, relocation provided) role at Agoda .

• Play a lead role in developing and designing application-level security controls and standards.
• Perform application security design reviews against new products and services.
• Track and prioritize all security issues.
• Build internal security tools that help fix security problems at scale.
• Perform code review and drive remediation of discovered issues.
• Enable automated security testing at scale to measure vulnerability, and report on risk across all microservice, web and mobile platforms.
• Execute security tests on thousands of servers which are spread across on-premise and public cloud data centers.

• Strong foundations in software engineering.
• Minimum of 7 years of technical experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security.
• Minimum 2 years experience with Software Development Life Cycle in one or more languages (Rust, Python, Go, Node.js, etc.).
• Minimum 1 year experience with public/private cloud environments (OpenShift, Rancher, Kubernetes, AWS, GCP, Azure, etc.).
• Experience in running assessments using OWASP MASVS and ASVS.
• Working knowledge of exploiting and fixing application vulnerabilities.
• Strong background in threat modeling.
• In-depth knowledge of common web application vulnerabilities (OWASP Top 10).
• Familiarity with automated dynamic scanners, fuzzers, and proxy tools.
• Analytical problem-solver with offensive security mindset.
• Highly effective communication skills, in both verbal and written forms, to convey technical concepts to diverse audiences.
• Relocation package is provided for those who relocate to Bangkok, Thailand. Our benefits are.

• Hybrid Working Model
• WFH Set Up Allowance
• 30 Days of Remote Working from anywhere globally every year
• Employee discount for accommodation globally
• Global team of 90+ nationalities
• 40+ offices and 25+ countries
• Annual CSR / Volunteer Time off
• Benevity Subscription for employee donations
• Volunteering opportunities globally
• Free Headspace subscription
• Free Odilo & Udemy subscriptions
• Access to Employee Assistance Program (third party for personal and workplace support)
• Enhanced Parental Leave
• Life, TPD & Accident Insurance

Equal Opportunity Employer: Agoda prides itself on being a company represented by people of diverse backgrounds and orientations. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We may keep your application on file for future vacancies and you can request removal at any time by reading our privacy policy.

We do not accept unsolicited agency submissions. If we receive such submissions, we reserve the right to contact and hire the candidate directly without paying a recruitment fee.

Overview

Senior Application Security Engineer (Bangkok based, relocation provided) – Agoda

Join to apply for the Senior Application Security Engineer (Bangkok based, relocation provided) role at Agoda .

• Play a lead role in developing and designing application-level security controls and standards.
• Perform application security design reviews against new products and services.
• Track and prioritize all security issues.
• Build internal security tools that help fix security problems at scale.
• Perform code review and drive remediation of discovered issues.
• Enable automated security testing at scale to measure vulnerability, and report on risk across all microservice, web and mobile platforms.
• Execute security tests on thousands of servers which are spread across on-premise and public cloud data centers.

• Strong foundations in software engineering.
• Minimum of 7 years of technical experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security.
• Minimum 2 years experience with Software Development Life Cycle in one or more languages (Rust, Python, Go, Node.js, etc.).
• Minimum 1 year experience with public/private cloud environments (OpenShift, Rancher, Kubernetes, AWS, GCP, Azure, etc.).
• Experience in running assessments using OWASP MASVS and ASVS.
• Working knowledge of exploiting and fixing application vulnerabilities.
• Strong background in threat modeling.
• In-depth knowledge of common web application vulnerabilities (OWASP Top 10).
• Familiarity with automated dynamic scanners, fuzzers, and proxy tools.
• Analytical problem-solver with offensive security mindset.
• Highly effective communication skills, in both verbal and written forms, to convey technical concepts to diverse audiences.
• Relocation package is provided for those who relocate to Bangkok, Thailand. Our benefits are.

• Hybrid Working Model
• WFH Set Up Allowance
• 30 Days of Remote Working from anywhere globally every year
• Employee discount for accommodation globally
• Global team of 90+ nationalities
• 40+ offices and 25+ countries
• Annual CSR / Volunteer Time off
• Benevity Subscription for employee donations
• Volunteering opportunities globally
• Free Headspace subscription
• Free Odilo & Udemy subscriptions
• Access to Employee Assistance Program (third party for personal and workplace support)
• Enhanced Parental Leave
• Life, TPD & Accident Insurance

Equal Opportunity Employer: Agoda prides itself on being a company represented by people of diverse backgrounds and orientations. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We may keep your application on file for future vacancies and you can request removal at any time by reading our privacy policy.

We do not accept unsolicited agency submissions. If we receive such submissions, we reserve the right to contact and hire the candidate directly without paying a recruitment fee.

Overview

Senior Application Security Engineer (Bangkok based, relocation provided) – Agoda

Join to apply for the Senior Application Security Engineer (Bangkok based, relocation provided) role at Agoda .

• Play a lead role in developing and designing application-level security controls and standards.
• Perform application security design reviews against new products and services.
• Track and prioritize all security issues.
• Build internal security tools that help fix security problems at scale.
• Perform code review and drive remediation of discovered issues.
• Enable automated security testing at scale to measure vulnerability, and report on risk across all microservice, web and mobile platforms.
• Execute security tests on thousands of servers which are spread across on-premise and public cloud data centers.

• Strong foundations in software engineering.
• Minimum of 7 years of technical experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security.
• Minimum 2 years experience with Software Development Life Cycle in one or more languages (Rust, Python, Go, Node.js, etc.).
• Minimum 1 year experience with public/private cloud environments (OpenShift, Rancher, Kubernetes, AWS, GCP, Azure, etc.).
• Experience in running assessments using OWASP MASVS and ASVS.
• Working knowledge of exploiting and fixing application vulnerabilities.
• Strong background in threat modeling.
• In-depth knowledge of common web application vulnerabilities (OWASP Top 10).
• Familiarity with automated dynamic scanners, fuzzers, and proxy tools.
• Analytical problem-solver with offensive security mindset.
• Highly effective communication skills, in both verbal and written forms, to convey technical concepts to diverse audiences.
• Relocation package is provided for those who relocate to Bangkok, Thailand. Our benefits are.

• Hybrid Working Model
• WFH Set Up Allowance
• 30 Days of Remote Working from anywhere globally every year
• Employee discount for accommodation globally
• Global team of 90+ nationalities
• 40+ offices and 25+ countries
• Annual CSR / Volunteer Time off
• Benevity Subscription for employee donations
• Volunteering opportunities globally
• Free Headspace subscription
• Free Odilo & Udemy subscriptions
• Access to Employee Assistance Program (third party for personal and workplace support)
• Enhanced Parental Leave
• Life, TPD & Accident Insurance

Equal Opportunity Employer: Agoda prides itself on being a company represented by people of diverse backgrounds and orientations. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We may keep your application on file for future vacancies and you can request removal at any time by reading our privacy policy.

We do not accept unsolicited agency submissions. If we receive such submissions, we reserve the right to contact and hire the candidate directly without paying a recruitment fee.

Overview

Senior Application Security Engineer (Bangkok based, relocation provided) – Agoda

Join to apply for the Senior Application Security Engineer (Bangkok based, relocation provided) role at Agoda .

• Play a lead role in developing and designing application-level security controls and standards.
• Perform application security design reviews against new products and services.
• Track and prioritize all security issues.
• Build internal security tools that help fix security problems at scale.
• Perform code review and drive remediation of discovered issues.
• Enable automated security testing at scale to measure vulnerability, and report on risk across all microservice, web and mobile platforms.
• Execute security tests on thousands of servers which are spread across on-premise and public cloud data centers.

• Strong foundations in software engineering.
• Minimum of 7 years of technical experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security.
• Minimum 2 years experience with Software Development Life Cycle in one or more languages (Rust, Python, Go, Node.js, etc.).
• Minimum 1 year experience with public/private cloud environments (OpenShift, Rancher, Kubernetes, AWS, GCP, Azure, etc.).
• Experience in running assessments using OWASP MASVS and ASVS.
• Working knowledge of exploiting and fixing application vulnerabilities.
• Strong background in threat modeling.
• In-depth knowledge of common web application vulnerabilities (OWASP Top 10).
• Familiarity with automated dynamic scanners, fuzzers, and proxy tools.
• Analytical problem-solver with offensive security mindset.
• Highly effective communication skills, in both verbal and written forms, to convey technical concepts to diverse audiences.
• Relocation package is provided for those who relocate to Bangkok, Thailand. Our benefits are.

• Hybrid Working Model
• WFH Set Up Allowance
• 30 Days of Remote Working from anywhere globally every year
• Employee discount for accommodation globally
• Global team of 90+ nationalities
• 40+ offices and 25+ countries
• Annual CSR / Volunteer Time off
• Benevity Subscription for employee donations
• Volunteering opportunities globally
• Free Headspace subscription
• Free Odilo & Udemy subscriptions
• Access to Employee Assistance Program (third party for personal and workplace support)
• Enhanced Parental Leave
• Life, TPD & Accident Insurance

Equal Opportunity Employer: Agoda prides itself on being a company represented by people of diverse backgrounds and orientations. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We may keep your application on file for future vacancies and you can request removal at any time by reading our privacy policy.

We do not accept unsolicited agency submissions. If we receive such submissions, we reserve the right to contact and hire the candidate directly without paying a recruitment fee.

Overview

Senior Application Security Engineer (Bangkok based, relocation provided) – Agoda

Join to apply for the Senior Application Security Engineer (Bangkok based, relocation provided) role at Agoda .

• Play a lead role in developing and designing application-level security controls and standards.
• Perform application security design reviews against new products and services.
• Track and prioritize all security issues.
• Build internal security tools that help fix security problems at scale.
• Perform code review and drive remediation of discovered issues.
• Enable automated security testing at scale to measure vulnerability, and report on risk across all microservice, web and mobile platforms.
• Execute security tests on thousands of servers which are spread across on-premise and public cloud data centers.

• Strong foundations in software engineering.
• Minimum of 7 years of technical experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security.
• Minimum 2 years experience with Software Development Life Cycle in one or more languages (Rust, Python, Go, Node.js, etc.).
• Minimum 1 year experience with public/private cloud environments (OpenShift, Rancher, Kubernetes, AWS, GCP, Azure, etc.).
• Experience in running assessments using OWASP MASVS and ASVS.
• Working knowledge of exploiting and fixing application vulnerabilities.
• Strong background in threat modeling.
• In-depth knowledge of common web application vulnerabilities (OWASP Top 10).
• Familiarity with automated dynamic scanners, fuzzers, and proxy tools.
• Analytical problem-solver with offensive security mindset.
• Highly effective communication skills, in both verbal and written forms, to convey technical concepts to diverse audiences.
• Relocation package is provided for those who relocate to Bangkok, Thailand. Our benefits are.

• Hybrid Working Model
• WFH Set Up Allowance
• 30 Days of Remote Working from anywhere globally every year
• Employee discount for accommodation globally
• Global team of 90+ nationalities
• 40+ offices and 25+ countries
• Annual CSR / Volunteer Time off
• Benevity Subscription for employee donations
• Volunteering opportunities globally
• Free Headspace subscription
• Free Odilo & Udemy subscriptions
• Access to Employee Assistance Program (third party for personal and workplace support)
• Enhanced Parental Leave
• Life, TPD & Accident Insurance

Equal Opportunity Employer: Agoda prides itself on being a company represented by people of diverse backgrounds and orientations. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We may keep your application on file for future vacancies and you can request removal at any time by reading our privacy policy.

We do not accept unsolicited agency submissions. If we receive such submissions, we reserve the right to contact and hire the candidate directly without paying a recruitment fee.

Senior Incident Response Specialist, Bangkok Based (Relocation Provided)

We are seeking an industry-experienced, highly motivated and self-driven Incident Response Specialist who can rapidly address security incidents and threats, strategize and lead engagements with all staffing levels. On the ground level, your job is to monitor threats targeting Agoda and help prevent attacks from occurring or worsening.

• Perform end-to-end handling of all critical, high and medium cyber security incidents at Agoda
• Draft incident reports and communicate incident summaries to senior leadership, end users, legal teams
• Write playbooks for different types of cyber security incidents and use automation to reduce MTTR
• Automate repetitive tasks of incident response using automation platforms and/or programming
• Optimize existing security controls to fine-tune alerts and reduce false positives
• Gather open source and commercial threat intelligence and perform hunting across the enterprise for undetected threats
• Support the legal and regulatory teams as a technical SME for cyber incidents with regulatory requirements
• Evaluate new technologies and drive POCs for new security products

Note: You will be expected to leverage your coding skills to develop and automate solutions that enhance our Detection and Response capabilities. Proficiency in understanding and writing code is essential for building and maintaining response automation tools.

• 5+ years of experience in Cyber Security, specifically in Incident Response, and experience working with 24/7 SOC teams
• Strong understanding of NIST, CSF, MITRE and other cyber security frameworks
• Programming or scripting skills (e.g., Python or C++) for automating incident response tasks and developing custom security tools
• Ability to write and tune detection rules in different security platforms
• Hands-on experience dealing with major security incidents
• Ability to automate using automation platforms or programming skills
• Malware analysis and digital forensics experience are a plus
• Certifications in Cyber Security, Forensic and Incident Response are a plus (CISSP, ECSA, GISP, GCIH, GCFE, GCFA)
• Flexible, fast-moving, adaptable and multi-tasking; excellent English communication skills (oral and written)
• Relocation package provided for Bangkok, Thailand
• Hybrid working model and WFH setup allowances

• Hybrid working model
• WFH set up allowance
• 30 days remote working from anywhere globally each year
• Employee discount for accommodation globally
• Global team of 90+ nationalities
• 40+ offices and 25+ countries
• Annual CSR / Volunteer Time off
• Benevity subscription for employee donations
• Volunteering opportunities globally
• Free Headspace, Odilo & Udemy subscriptions
• Employee Assistance Program
• Enhanced Parental Leave
• Life, TPD & Accident Insurance

At Agoda, we pride ourselves on being a company represented by people of diverse backgrounds and orientations. We are committed to equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics. We may keep your application on file for future vacancies unless you request removal. For details, please read our privacy policy.

We do not engage with unsolicited third-party agencies. If we receive unsolicited CVs, we reserve the right to contact and hire the candidate directly without a recruitment fee.

Overview

Senior Application Security Engineer (Bangkok based, relocation provided) – Agoda

Join to apply for the Senior Application Security Engineer (Bangkok based, relocation provided) role at Agoda .

• Play a lead role in developing and designing application-level security controls and standards.
• Perform application security design reviews against new products and services.
• Track and prioritize all security issues.
• Build internal security tools that help fix security problems at scale.
• Perform code review and drive remediation of discovered issues.
• Enable automated security testing at scale to measure vulnerability, and report on risk across all microservice, web and mobile platforms.
• Execute security tests on thousands of servers which are spread across on-premise and public cloud data centers.

• Strong foundations in software engineering.
• Minimum of 7 years of technical experience with any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security.
• Minimum 2 years experience with Software Development Life Cycle in one or more languages (Rust, Python, Go, Node.js, etc.).
• Minimum 1 year experience with public/private cloud environments (OpenShift, Rancher, Kubernetes, AWS, GCP, Azure, etc.).
• Experience in running assessments using OWASP MASVS and ASVS.
• Working knowledge of exploiting and fixing application vulnerabilities.
• Strong background in threat modeling.
• In-depth knowledge of common web application vulnerabilities (OWASP Top 10).
• Familiarity with automated dynamic scanners, fuzzers, and proxy tools.
• Analytical problem-solver with offensive security mindset.
• Highly effective communication skills, in both verbal and written forms, to convey technical concepts to diverse audiences.
• Relocation package is provided for those who relocate to Bangkok, Thailand. Our benefits are.

• Hybrid Working Model
• WFH Set Up Allowance
• 30 Days of Remote Working from anywhere globally every year
• Employee discount for accommodation globally
• Global team of 90+ nationalities
• 40+ offices and 25+ countries
• Annual CSR / Volunteer Time off
• Benevity Subscription for employee donations
• Volunteering opportunities globally
• Free Headspace subscription
• Free Odilo & Udemy subscriptions
• Access to Employee Assistance Program (third party for personal and workplace support)
• Enhanced Parental Leave
• Life, TPD & Accident Insurance

Equal Opportunity Employer: Agoda prides itself on being a company represented by people of diverse backgrounds and orientations. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We may keep your application on file for future vacancies and you can request removal at any time by reading our privacy policy.

We do not accept unsolicited agency submissions. If we receive such submissions, we reserve the right to contact and hire the candidate directly without paying a recruitment fee.