platform security engineer

Agoda

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript.
 
 
 
 Key Responsibilities:
 
 
 
 Secure Cloud Deployment:
 
 
 <ul>
 <li>
 Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
 </li>
 <li>
 Kubernetes &amp; GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.
 </li>
 <li>
 Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
 </li>
 <li>
 Security Automation &amp; Tooling: Design and build security tooling and services using Go and TypeScript.
 </li>
 <li>
 Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
 </li>
 <li>
 Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
 </li>
 <li>
 Threat Detection &amp; Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience:
 
 
 
 <ul>
 <li>
 8+ years of experience in security engineering, cloud security, or platform engineering roles.
 </li>
 <li>
 Hands-on experience securing production workloads in AWS and GCP.
 </li>
 <li>
 Strong experience designing and securing Infrastructure as Code using Terraform.
 </li>
 <li>
 Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
 </li>
 <li>
 Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
 </li>
 <li>
 Experience embedding security controls into CI/CD pipelines.
 </li>
 <li>
 Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security
 </li>
 <li>
 Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate
 </li>
 <li>
 Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
 </li>
 <li>
 Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Security Engineer (Bangkok Based, Relocation Support)

MERCOR

<div><h2 class="jobSectionHeader">About Mercor</h2>
Mercor's mission is to organize human intelligence to power the AI economy. We partner with leading AI labs and enterprises to provide the human intelligence essential to AI development. Our vast talent network trains frontier AI models in the same way teachers teach students: by sharing knowledge, experience, and context that can't be captured in code alone. Today, more than 30,000 experts in our network collectively earn over $3 million a day.
Mercor is creating a new category of work where expertise powers AI advancement. Achieving this requires an ambitious, fast-paced and deeply committed team. You&rsquo;ll work alongside researchers, operators, and AI companies at the forefront of shaping the systems that are redefining society. Mercor is a profitable Series C company valued at $10 billion. We work in-person five days a week in our San Francisco, NYC, or London offices.
You'll own cloud and infrastructure security at a company where tenant isolation is a critical enterprise requirement. Mercor's customers - including frontier AI labs - need hard guarantees that their data stays within strict boundaries. This is not a compliance checkbox role. You'll architect multi-account AWS isolation, harden Kubernetes clusters, deploy cloud security posture management, and build the infrastructure that lets Mercor serve enterprise clients who demand the highest security bar.
We use AI heavily in our own security work. You should be comfortable building alongside AI code-gen tools, using LLMs to accelerate infrastructure review and policy authoring, and automating away the repetitive work that slows infrastructure security down. If you'd rather write a Terraform module than fill out a spreadsheet, you'll fit in here.
We're in-person five days a week at our SF headquarters, with first Fridays remote.<h3 class="jobSectionHeader">
What You'll Build:</h3><ul><li>
Multi-account AWS tenant isolation architecture - dedicated accounts, SCPs, network boundaries, and data segregation for enterprise clients</li><li>
Cloud security posture management using Wiz CSPM - continuous monitoring, misconfiguration detection, and automated remediation</li><li>
Kubernetes security hardening - pod security standards, network policies, secrets management, and runtime protection</li><li>
Infrastructure-as-code security guardrails - Terraform/CloudFormation policies that prevent insecure deployments before they reach production</li><li>
IAM architecture and least-privilege access controls across AWS, Snowflake, and internal services</li><li>
Incident response infrastructure - logging pipelines, forensic readiness, and blast radius containment</li></ul><h3 class="jobSectionHeader">
What We're Looking For</h3><ul><li>
Deep AWS security expertise - you've architected multi-account strategies, written SCPs, and hardened production environments</li><li>
Experience with Kubernetes security in production - not just tutorials, you've secured real clusters running real workloads</li><li>
Strong infrastructure-as-code skills - Terraform, CloudFormation, or Pulumi - you think in code, not console clicks</li><li>
Experience with CSPM/CNAPP platforms (Wiz, Prisma Cloud, or similar) - deploying, tuning, and driving remediation</li><li>
Understanding of network security at the cloud level - VPCs, security groups, transit gateways, PrivateLink</li><li>
You've designed tenant isolation for multi-tenant SaaS - data segregation, compute isolation, network boundaries</li><li>
5+ years of professional experience in cloud security, infrastructure security, or platform/SRE engineering with a strong security focus</li></ul><h3 class="jobSectionHeader">
Bonus Points</h3><ul><li>
Experience with Snowflake security - schema-level isolation, access controls, data sharing governance</li><li>
Familiarity with container runtime security (Falco, SentinelOne Cloud Workload Protection, or similar)</li><li>
Offensive cloud security skills - you've exploited misconfigurations and understand the attacker's perspective</li><li>
Experience building compliance-ready infrastructure (SOC 2, ISO 27001, FedRAMP)</li><li>
You've handled cloud security incidents - forensics, containment, and root cause analysis in AWS</li><li>
Contributions to open source infrastructure security tools</li></ul><h3 class="jobSectionHeader">
Why Mercor</h3><ul><li>
The deliverable is concrete. Enterprise clients require tenant isolation as a baseline. You'll build infrastructure that directly enables the business.</li><li>
AI-native infrastructure security. You'll use frontier AI tools daily - for policy authoring, misconfiguration analysis, and anything that benefits from an AI co-pilot.</li><li>
Ownership from day one. You'll own the entire cloud security domain - from AWS architecture to Kubernetes hardening to CSPM operations.</li><li>
See the future early. Working alongside AI labs means you'll understand frontier model capabilities months before the market.</li></ul>
Benefits<ul><li>
Bi-annual performance bonus structure</li><li>
Generous equity grant vested over 4 years</li><li>
Up to $15k Relocation bonus</li><li>
$10K housing bonus (if you live within 0.5 miles of our office)</li><li>
$1.5K monthly stipend for meals</li><li>
Free Equinox membership</li><li>
$200 monthly laundry reimbursement</li><li>
$200 monthly personal wellness reimbursement</li><li>
Health, Dental, Vision insurance</li></ul>
Compensation Range: $130K - $400K</div>

Security Engineer, Cloud Infrastructure

Bowhead

<div>Overview:

CLOUD ACCELERATION SERVICES AND CYBERSECURITY BUSINESS ENTERPRISE SYSTEMS (CASBES): 
Bowhead seeks individuals to network with, in effort to support the Cloud Acceleration Services (CAS) and Cybersecurity Business Enterprise Systems contract located in Montgomery, AL. The mission of this contract is to provide comprehensive cloud and cybersecurity services to modernize, standardize, secure and enhance its information technology (IT) infrastructure, platforms, and mission applications.
Responsibilities:

Positions available include: 
<ul><li>
Senior Cloud Engineer</li><li>
Cloud Migration Engineer</li><li>
Cloud Operations Engineer</li><li>
Information System Security Officer (ISSO)</li><li>
Security Control Assessor Representative (SCAR)</li><li>
RMF Analyst</li><li>
Cybersecurity Analyst</li><li>
Vulnerability Management Analyst</li><li>
Identity and Access Management (IAM) Engineer</li><li>
DevSecOps Engineer</li><li>
Software Developer III</li><li>
Software Developer II</li><li>
Platform Engineer</li><li>
Database Administrator</li><li>
Data Migration Specialist</li><li>
Quality Assurance/Test Lead</li><li>
Test Automation Engineer</li><li>
Agile Scrum Master</li><li>
Technical Writer</li><li>
Training Specialist</li></ul>
Qualifications:
<ul><li>Required education, years of experience, and certifications will vary based on position requirements</li><li>
Intermediate to advanced level skills in networking and systems administration with Windows and/or Linux environments</li><li>
Intermediate to advanced level skills with any of the following Cisco, Juniper, Palo Alto products</li><li>
Experience using scanning tools such as HBSS, NESSUS, Nmap, Splunk, Elastic</li><li>
Experience working with SDREN or DREN networks preferred</li><li>
Ability to communicate effectively</li><li>
Strong interpersonal skills and good judgment with the ability to work alone or as part of a team</li></ul> 
Physical Demands: 
<ul><li>
Must be able to lift up to 20 pounds</li><li>
Must be able to stand and walk for prolonged amounts of time</li><li>
Must be able to twist, bend and squat periodically</li></ul> 
SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Secret level. US Citizenship is a requirement for Secret clearance at this location.</div>

Cloud Acceleration Services and Cybersecurity Business Enterprise Systems

Search 5575+ Platform security engineer jobs near you this June. New roles added regularly across leading industries. Apply today.

5575 platform security engineer jobs Near Me

Security Engineer (Bangkok Based, Relocation Support)

Security Engineer (Bangkok Based, Relocation Support)

Security Engineer (Bangkok Based, Relocation Support)

Security Engineer (Bangkok Based, Relocation Support)

Security Engineer (Bangkok Based, Relocation Support)

Security Engineer, Cloud Infrastructure

Cloud Acceleration Services and Cybersecurity Business Enterprise Systems