Application Security Analyst

The Security Department oversees security, compliance, governance, risk, and security operations across Agoda. The team works to identify, assess, and reduce security risks that could affect Agoda’s products, platforms, employees, or customers. This role is a 10-month contract based in Bangkok, Thailand, and the successful candidate will be assigned to support application security initiatives and related security projects. As an Application Security Analyst, you will work with experienced security professionals to help identify, triage, and track application security findings across Agoda’s technology environment. You will support vulnerability management, security assessments, secure development activities, and risk analysis while gaining hands-on experience with modern application security processes, tooling, and cloud-based engineering practices. In This Role, You’ll Get To: Help triage, validate, and track application security findings, working with engineering and product teams to support timely remediation. Participate in vulnerability assessments, code reviews, and penetration testing activities under the guidance of senior security team members. Research security issues, analyze potential impact, and help document risk in a clear and actionable way. Support OWASP-based application security assessments across web applications, APIs, backend services, and related technology stacks. Use security tools and platforms to review findings, monitor remediation status, and maintain accurate security records. Collaborate with Security, Engineering, IT, and business stakeholders to ensure security issues are communicated clearly and handled effectively.