Application Security Analyst, Security Team (Bangkok-based, 10-month Contract)

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.  

Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.

No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.

About Agoda 

At Agoda, we bridge the world through travel. Since 2005, Agoda has helped make travel easier and more rewarding for everyone. Today, we are part of Booking Holdings and operate with a diverse global team across offices worldwide, using data, technology, and experimentation to connect people with destinations and experiences. 

Get to Know Our Team 

The Security Department oversees security, compliance, governance, risk, and security operations across Agoda. The team works to identify, assess, and reduce security risks that could affect Agoda’s products, platforms, employees, or customers. This role is a 10-month contract based in Bangkok, Thailand, and the successful candidate will be assigned to support application security initiatives and related security projects. 

The Opportunity 

As an Application Security Analyst, you will work with experienced security professionals to help identify, triage, and track application security findings across Agoda’s technology environment. You will support vulnerability management, security assessments, secure development activities, and risk analysis while gaining hands-on experience with modern application security processes, tooling, and cloud-based engineering practices. 

In This Role, You’ll Get To 

• Help triage, validate, and track application security findings, working with engineering and product teams to support timely remediation. 

• Participate in vulnerability assessments, code reviews, and penetration testing activities under the guidance of senior security team members. 

• Research security issues, analyze potential impact, and help document risk in a clear and actionable way. 

• Support OWASP-based application security assessments across web applications, APIs, backend services, and related technology stacks. 

• Use security tools and platforms to review findings, monitor remediation status, and maintain accurate security records. 

• Collaborate with Security, Engineering, IT, and business stakeholders to ensure security issues are communicated clearly and handled effectively. 

#Bangkok #IT #entrylevel

• Agoda Careers https://careersatagoda.com
• Facebook https://www.facebook.com/agodacareers/
• LinkedIn https://www.linkedin.com/company/agoda
• YouTube https://www.youtube.com/agodalife

At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.

We do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.