Application Security Analyst, Security Team (Bangkok-based, 10-month Contract)

📋 Job Overview

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.

🏢 About Agoda

At Agoda, we bridge the world through travel. Since 2005, Agoda has helped make travel easier and more rewarding for everyone. Today, we are part of Booking Holdings and operate with a diverse global team across offices worldwide, using data, technology, and experimentation to connect people with destinations and experiences.

🎯 The Role

The Security Department oversees security, compliance, governance, risk, and security operations across Agoda. The team works to identify, assess, and reduce security risks that could affect Agoda’s products, platforms, employees, or customers. This role is a 10-month contract based in Bangkok, Thailand, and the successful candidate will be assigned to support application security initiatives and related security projects.

✅ Key Responsibilities

• Help triage, validate, and track application security findings, working with engineering and product teams to support timely remediation.
• Participate in vulnerability assessments, code reviews, and penetration testing activities under the guidance of senior security team members.
• Research security issues, analyze potential impact, and help document risk in a clear and actionable way.
• Support OWASP-based application security assessments across web applications, APIs, backend services, and related technology stacks.
• Use security tools and platforms to review findings, monitor remediation status, and maintain accurate security records.
• Collaborate with Security, Engineering, IT, and business stakeholders to ensure security issues are communicated clearly and handled effectively.

📌 Required Qualifications

• Understanding of application security concepts and common vulnerabilities.
• Basic knowledge of web application architecture and security controls.
• Ability to learn and adapt to new security tools and technologies.
• Strong analytical and problem-solving skills.
• Excellent communication skills, both written and verbal.
• Detail-oriented with strong organizational skills.

⭐ Desirable Experience

• Previous experience in application security or related field.
• Familiarity with security testing tools such as Burp Suite, OWASP ZAP, or similar.
• Understanding of secure coding practices and principles.
• Experience with cloud-based security tools and platforms.
• Knowledge of security frameworks and compliance standards.

🎁 Benefits

Agoda offers a competitive compensation package and benefits, including health insurance, retirement plans, and professional development opportunities. The specific details of the compensation package will be discussed during the interview process.

🛂 Visa & Eligibility

Eligibility to work in Thailand is required for this position.