About AgodaAgoda is an online travel booking platform for accommodations, flights, and more. We build and deploy cutting-edge technology that connects travelers with more than 3.6 million accommodations globally. Based in Asia and part of Booking Holdings, our 6,000+ employees representing 90+ nationalities foster a work environment rich in diversity, creativity, and collaboration. We innovate through a culture of experimentation and ownership, enhancing the ability for our customers to experience the world.Get to Know our team:Agoda’s DevOps department is a vibrant and synergistic collective, comprised of highly proficient engineers with expertise across various domains. We’re dedicated to improving the developer productivity by providing best-in-class developer experience through seamless integration of development and operations. Our team works on comprehensive full-stack solutions, overseeing projects from conceptual design to the deployment of functional applications. This includes crafting intuitive user interfaces, robust APIs, core system functionalities, and implementing scalable data storage solutions across a distributed network. We work with the security team to provide a platform and company-wide integrations. Our work affects all the IT department at Agoda, turning even minor issues into exciting challenges due to the scale and speed we operate at. The Opportunity:DevSecOps Engineer is a pivotal role within our DevOps organization. You will be responsible for development and implementation with the focus of providing security as a platform. You will be a key contributor to the team and it would require broad knowledge of the technology stack across the industry. You will have the opportunity to be impactful across the entire SDLC process. For you to succeed in this role, you should strive to balance the industry best-practice with Agoda’s scale. A developer-centric approach is essential, as you will be expected to empathize with and address the needs of our development teams, fostering a culture where security is ingrained in every aspect of our workflow. In this Role, you'll get to:
Maintain CI/CD best practices and automate security testing at the speed of DevOps on a very large scale (~1M pipelines a month)
Design, implement, and monitor in-house built security tooling chain
Maintain a platform that includes a complex automated security scoring system for every development component at Agoda.
What you’ll need to succeed:
Excellent coding skills in a modern programming language (preferably Go, Rust, or Python)
Software architecture design skills for achieving high availability and fault tolerance
Knowledge of network security and application security concepts
Familiarity with development ecosystem tooling: Git, CI, Docker, Kubernetes.
Experience with Linux system administration
Passion for learning cutting-edge technologies and automating large scale processes
Excellent collaboration and communication skill
It’s great if you have:
Familiarity with secure coding best practices
Experience utilizing modern CI systems (e.g., GitLab CI, GitHub Actions, CircleCI, Jenkins).
Advanced Kubernetes & Docker knowledge (plus points for experience with k8s operator development)
Extended knowledge in securing an application security in CI/CD (e.g., SAST, DAST)
Experience coding a full-stack application (preferably with React.js and Go)
Experience with HashiCorp tools (Consul, Vault, Terraform)
Experience with both SQL and NoSQL databases (PostgreSQL, Elasticsearch, MSSQL)
Equal Opportunity EmployerAt Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.To all recruitment agencies: Agoda does not accept third party resumes. Please do not send resumes to our jobs alias, Agoda employees or any other organization location. Agoda is not responsible for any fees related to unsolicited resumes.
