Agoda - Lead Application Security Engineer
Requirements
• Strong foundations in software engineering. • software engineering • Minimum of 7 years of technical experience with any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security. • threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security. • Minimum 2 years experience with Software Development Life Cycle in one or more languages (Rust, Python, Go, Nodejs, etc.) • Rust, Python, Go, Nodejs, etc. • Minimum 1 year experience with public/private cloud environments (Openshift, Rancher, K8s, AWS, GCP, Azure, etc.) • Openshift, Rancher, K8s, AWS, GCP, Azure, etc. • Experience in running assessments using OWASP MASVS and ASVS. • Working knowledge on exploiting and fixing application vulnerabilities. • Strong background in threat modeling. • In-depth knowledge of common web application vulnerabilities (i.e. OWASP Top 10). • Familiarity with automated dynamic scanners, fuzzers, and proxy tools. • An analytical mind for problem solving, abstract thought, and offensive security tactics. • Highly effective communication skills, in both verbal and written forms, to effectively convey technical and non-technical concepts to a wide variety of audiences • Relocation package is provided in case you prefer to relocate to Bangkok, Thailand. Our benefits are... • Hybrid Working Model • WFH Set Up Allowance • 30 Days of Remote Working from anywhere globally every year • Employee discount for accommodation globally • Global team of 90+ nationalities • 40+ offices and 25+ countries • Annual CSR / Volunteer Time off • Benevity Subscription for employee donations • Volunteering opportunities globally • Free Headspace subscription • Free Odilo & Udemy subscriptions • Access to Employee Assistance Program (third party for personal and workplace support) • Enhanced Parental Leave • Life, TPD & Accident Insurance • Please review our Hiring Process Guidelines before your interview — click here to learn how interviewing at Agoda works.
Responsibilities
• Play a lead role in developing and designing application-level security controls and standards. • Perform application security design reviews against new products and services. • Track and prioritize all security issues. • Build internal security tools that help fix security problems at scale. • Perform code review and drive remediation of discovered issues. • Enable automated security testing at scale to measure vulnerability, and report on risk across all microservice, web and mobile platforms. • Execute security tests on thousands of servers which are spread across on-premise and public cloud data centers.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT