Staff/Lead Application Security Engineer Full-time Job

What you’ll Need to Succeed:

Strong foundations in software engineering.

Minimum of 7 years of technical experience with any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security.

Minimum 2 years experience with Software Development Life Cycle in one or more languages (Rust, Python, Go, Nodejs, etc.)

Minimum 1 year experience with public/private cloud environments (Openshift, Rancher, K8s, AWS, GCP, Azure, etc.)

Experience in running assessments using OWASP MASVS and ASVS

Working knowledge on exploiting and fixing application vulnerabilities

Strong background in threat modeling

In-depth knowledge of common web application vulnerabilities (i.e. OWASP Top 10)

Familiarity with automated dynamic scanners, fuzzers, and proxy tools

An analytical mind for problem solving, abstract thought, and offensive security tactics

Agoda is an online travel platform that brings high-value and rewarding travel experiences to people all over the world through the Agoda app and Agoda website. Our mission is to empower everyone to be a traveler by offering affordable deals on hotels, flights, activities, and more, with an Agoda booking experience that is hassle-free from start to finish.
Since the Agoda company was founded in 2005, weve made searching and booking travel as easy and stress-free as it should be. Agoda is now considered one of Asias leading travel-tech companies with millions of registered customers supported by a truly diverse team of more than 6,600 people in 31 markets and Agoda customer service available 24/7.
Visitor Numbers
In accordance with the obligations of Agoda Company Pte Limited (Agoda) under the EUs Digital Services Act, we estimate that the average monthly recipients* of the Agoda service in the European Union from 1 August 2022 up to and including 31 January 2023, is well below 45 million.
This is only an estimate and is based on the data available to Agoda at this time, and the limited guidance in the Digital Services Act (DSA). This estimate is required to be published under the DSA and should not be used for any other purpose. The methodologies used to estimate average monthly recipients as defined in the DSA require significant judgement and design inputs, are subject to data and other limitations, and inherently are subject to statistical variances and uncertainties. This estimate may be revised upwards or downwards as Agoda refines its approach and in response to the publication of methodology by the European Commission. As required by the DSA, we expect to publish a new estimate later in 2023.
Please refer to the Booking Holdings Inc. Investor Relations website for metrics we consider relevant to Agodas business.
* recipient of service is defined under the DSA to mean any natural or legal person who uses an intermediary service, in particular for the purposes of seeking information and making it accessible. This requires counting users to whom information was displayed by the Agoda service, even if that user did not make a transaction.