security automation engineer

Agoda

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript.
 
 
 
 Key Responsibilities:
 
 
 
 Secure Cloud Deployment:
 
 
 <ul>
 <li>
 Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
 </li>
 <li>
 Kubernetes &amp; GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.
 </li>
 <li>
 Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
 </li>
 <li>
 Security Automation &amp; Tooling: Design and build security tooling and services using Go and TypeScript.
 </li>
 <li>
 Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
 </li>
 <li>
 Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
 </li>
 <li>
 Threat Detection &amp; Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience:
 
 
 
 <ul>
 <li>
 8+ years of experience in security engineering, cloud security, or platform engineering roles.
 </li>
 <li>
 Hands-on experience securing production workloads in AWS and GCP.
 </li>
 <li>
 Strong experience designing and securing Infrastructure as Code using Terraform.
 </li>
 <li>
 Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
 </li>
 <li>
 Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
 </li>
 <li>
 Experience embedding security controls into CI/CD pipelines.
 </li>
 <li>
 Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security
 </li>
 <li>
 Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate
 </li>
 <li>
 Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
 </li>
 <li>
 Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Security Engineer (Bangkok Based, Relocation Support)

JPMorganChase

<div>JOB DESCRIPTION 
 
 
Join a team where you can play a crucial role in shaping the future of a world-renowned company and make a direct and meaningful impact in a space designed for top performers.
<div>As a Senior Lead Security Engineer at JPMorgan Chase within Cybersecurity and Technology Controls, you are an integral part of an agile team that delivers secure, innovative software solutions. You will leverage your deep technical expertise and problem-solving skills to address a diverse array of cybersecurity challenges spanning multiple technology domains, driving significant business impact and shaping the organization's security posture in a rapidly evolving threat landscape.
</div><div>This is a hands-on engineering role focused on technical execution, solution delivery, and direct contribution to security engineering projects. This is not a people management or administrative position.</div><div>
</div><div>Job Responsibilities</div><div>
</div><ul><li>Independently design, build, and implement advanced security solutions across cloud, hybrid, and on-prem environments, ensuring alignment with the latest industry best practices and regulatory requirements.</li><li>
Actively write code, develop automation, and integrate security controls throughout the software development lifecycle, collaborating with engineering teams to embed security from ideation to deployment.</li><li>
Facilitate security requirements clarification for multiple networks to enable multi-level security that satisfies organizational needs.
</li><li>Drive adoption and direct implementation of emerging cybersecurity technologies (e.g., zero trust architectures, container security, AI/ML-driven security analytics) to enhance the organization's security posture.</li><li>
Be responsible for triaging based on risk assessments of various threats and managing resources to cover the impact of disruptive events.</li><li>
Utilize a deep understanding of the threat landscape and risk to build security into products and new features.</li><li>
Mentor and provide technical guidance to junior engineers through code reviews and knowledge sharing, while remaining an individual contributor.</li><li>
Collaborate cross-functionally with product, infrastructure, and business teams to ensure security requirements are understood, prioritized, and implemented effectively.</li><li>
Stay abreast of the latest cybersecurity trends, threat intelligence, and attack techniques, and translate insights into actionable improvements for the organization.</li><li>
Develop and maintain incident response playbooks, and lead post-incident reviews to drive continuous improvement from a technical perspective.
</li><li>Actively contribute to an inclusive team environment by mentoring and supporting diverse perspectives.</li></ul>
<div>Required Qualifications, Capabilities, and Skills</div><div>
</div><ul><li>Obtain 5 plus years of applied training or certification on software engineering concepts
</li><li>Proven track record in hands-on design, development, and deployment of enterprise-grade security solutions in public cloud environments (AWS, GCP, Azure), with direct experience integrating security controls into cloud-native architectures.</li><li>
Demonstrated ability to perform comprehensive threat modeling and risk assessments for applications, systems, and architectures using frameworks such as STRIDE, DREAD, or PASTA.</li><li>
Advanced proficiency in at least one modern programming language (e.g., Python, C/C#, Go, Java) and scripting for automation and security tooling, with a focus on building and deploying solutions.</li><li>
Deep understanding of secure software development practices, including code review, static/dynamic analysis, and vulnerability remediation across multiple technology domains (cloud, AI/ML, mobile, etc.).</li><li>
Experience implementing and managing CI/CD pipelines (e.g., Jenkins, GitHub Actions) with integrated security testing and controls.</li><li>
Expertise in version control systems (e.g., Git, BitBucket) and agile work management tools (e.g., Jira), with a focus on collaborative, cross-functional engineering environments.</li><li>
Ability to independently solve complex design and functionality challenges, proactively identifying and mitigating security risks with minimal oversight.</li><li>
Experience working with vendors to assess the sufficiency of their security practices and controls to meet industry standards.</li><li>
Strong analytical and communication skills, with the ability to translate technical security requirements into actionable engineering tasks and clear documentation.</li></ul><div>
</div><div>Preferred Qualifications, Capabilities, and Skills</div><div>
</div><ul><li>Experience with modern security engineering practices, such as infrastructure as code (IaC), DevSecOps, and automated security testing.</li><li>
Hands-on experience with cloud-native security tools (e.g., AWS Security Hub, Azure Sentinel, GCP Security Command Center) and container orchestration platforms (e.g., Kubernetes).</li><li>
Active participation in the cybersecurity community, such as contributing to open-source projects, attending or speaking at conferences, or publishing research.</li><li>
Experience implementing zero trust architectures, micro-segmentation, or advanced identity and access management solutions.</li><li>
Strong understanding of privacy and data protection regulations (e.g., GDPR, CCPA) and their impact on security engineering.</li><li>
Experience within Cyber Security is preferred with a good understanding of industry frameworks like MITRE ATT&amp;CK, NIST, CIS, etc.</li><li>
Relevant advanced certifications (e.g., CISSP, CCSP, AWS Certified Security Specialty, GIAC, OSCP) are highly desirable.</li><li>
Excellent communication and presentation skills, with the ability to convey complex security concepts to technical and non-technical audiences.</li><li>
Experience with security automation and orchestration using tools like Terraform, Ansible, or custom scripting.</li><li>
Prior experience in highly regulated industries (finance, healthcare, etc.).</li><li>
Willingness to learn and drive to excel.</li></ul>
ABOUT US 
 
 
<div><div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><div>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
<div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans 
</div></div></div> 
 
ABOUT THE TEAM
 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Sr Lead Security Engineer - Workforce

Gulf Air

<div>Job Purpose 
Lead and manage the organization's cyber security operations, vulnerability management, cloud and infrastructure security, and security automation activities by implementing effective security controls, ensuring compliance with cyber security standards, strengthening threat detection and incident response capabilities, and embedding secure practices across technology operations to safeguard organizational systems, applications, and information assets.
Roles &amp; Responsibilities<ul><li> 
Conduct thorough security audits to identify vulnerabilities and implement actionable improvements.</li><li>
Develop and enforce robust Privilege Access Management (PAM) strategies to protect sensitive resources.</li><li>
Create and maintain Security Hardening Guidelines in compliance with CIS or SITG Benchmarks, ensuring secure configurations across all systems.</li><li>
Design and deploy automated processes for cybersecurity tasks using Python scripting.</li><li>
Manage the organization's Vulnerability Management Program, including regular scanning, assessment, remediation, and reporting.</li><li>
Implement and oversee Security Automation processes to streamline threat detection, incident response, and compliance checks.</li><li>
Continuously monitor security systems to detect, respond to, and resolve potential incidents promptly.</li><li>
Respond to cybersecurity incidents with effective containment, resolution, and detailed after-action reporting.</li><li>
Collaborate with IT, DevOps, and other teams to embed security practices into all phases of the SDLC.</li><li>
Monitor and maintain security tools such as SIEM, IDS/IPS, DLP, and endpoint protection solutions.</li><li>
Oversee the design, implementation, and management of security architectures for cloud-based and on-premise infrastructures.</li><li>
Perform periodic reviews of firewall configurations, user access controls, and other security mechanisms to optimize protection.</li><li>
Maintain the organization's cybersecurity framework and ensure alignment with industry standards and regulations.</li><li>
Proactively evaluate and deploy emerging cybersecurity technologies to mitigate evolving threats.</li><li>
Act as the primary contact for security incidents and collaborate with external teams for escalated support.</li><li>
Provide leadership in implementing threat intelligence strategies, ensuring continuous improvement of the organization's security posture.</li></ul>
Skills &amp; Technologies Required<ul><li> 
Threat Detection and Response using any of these tools (Microsoft Defender XDR, Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft Defender for Endpoint).</li><li>
Vulnerability Management using any of these tools (Nessus, Qualys, OpenVAS).</li><li>
privilege Access Management (PAM) using any of these tools (Wallix, CyberArk, BeyondTrust).</li><li>
Security Automation and Orchestration using any of these tools (Python, Splunk Phantom, Cortex XSOAR, Azure Sentinel ).</li><li>
DevSecOps using any of these tools (SonarQube, GitHub Actions, AWS CodePipeline).</li><li>
Security Hardening and Compliance using any of these tools (CIS Benchmarks, SITG Benchmarks, Qualys Policy Compliance).</li><li>
Cloud Security using any of these tools (AWS Security Hub, Azure Security Center, Microsoft Defender for Cloud).</li><li>
Network Security using any of these tools (Palo Alto Networks, Fortinet, Cisco ASA, Snort, Suricata).</li><li>
Endpoint Security using any of these tools (Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne).</li></ul>
Qualifications<ul><li> 
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (Master's degree preferred).</li><li>
Relevant certifications such as CISSP, CISM, CEH, CompTIA Security+, or equivalent.</li></ul></div>

MANAGER - CYBER SECURITY

Synagex

Synagex isn&rsquo;t your average MSP. Our mission is to provide true IT-as-a-service &ndash; people, process &amp; tools &ndash; delivered in a way that is easy, engaging, and fun. We are seeking a data-driven, security-obsessed SOC Lead to spearhead our security operations and serve as the engine room of our operational efficiency.You are the master of the tools and a mentor to the team. You don&rsquo;t just wait for an alert; you build the automation that fixes the problem before the client even knows it exists, and you teach your team how to do the same. We&rsquo;re looking for a candidate that is not only the digital sentry, watching the perimeter and ensuring our clients&rsquo; data stays locked down, but also a leader who embodies our core values:&middot; Send IT: You bring an infectious passion and a ferocious drive to everything you do. You have an in-it-to-win-it attitude, constantly pushing to reach goals, optimize how we work, and drive performance. For you, good enough isn't enough&mdash;you are always looking for ways to elevate your execution and velocity.&middot; Be the Tank: You are the ultimate teammate and a pillar of structural integrity. You collaborate selflessly, always have your colleagues' backs, and are willing to take the hits or carry the heavy load to protect the team. Because of your reliability, the people around you can rest easy knowing you are holding the line.&middot; Tear IT Up: You work hard and play hard, recognizing that maintaining a great work-life balance is key to long-term success. You make it a priority to celebrate the wins&mdash;both the massive milestones and the quiet, everyday victories. By fostering a positive, rewarding environment, you clear the path for everyone else to win big.ResponsibilitiesLeadership &amp; Mentorship<ul><li>Team Guidance: Act as the technical escalation point and mentor for junior technicians and SOC analysts, fostering a culture of continuous learning and security awareness.</li><li>Skill Development: Conduct regular training sessions, review team documentation, and guide staff through technical development pathways.</li><li>Process Optimization: Standardize daily SOC workflows, incident response playbooks, and triage processes to ensure consistent delivery and rapid resolution times.</li></ul>RMM &amp; Automation Engineering<ul><li>Oversee the RMM platform, ensuring every endpoint is healthy, checking in, and fully managed.</li><li>Develop, maintain, and audit a library of scripts to automate routine maintenance, deployments, and self-healing fixes.</li><li>Oversee the &quot;Patching Engine,&quot; ensuring that OS and third-party updates are tested and deployed with a 99% success rate across the entire client base.</li></ul>SOC &amp; Security Operations<ul><li>Monitor, triage, and lead the response to complex security incidents, directing initial investigations into suspicious logins, malware hits, or phishing attempts.</li><li>Maintain the health and optimization of our security stack, including antivirus, DNS filtering, and disk encryption.</li><li>Conduct proactive threat hunting and analysis across client environments using SIEM/EDR platforms.</li></ul>Data Integrity &amp; Reporting<ul><li>Ensure that the data flowing from the RMM to our PSA is accurate, clean, and actionable.</li><li>Review and generate &quot;Proof of Value&quot; reports for clients, demonstrating the &quot;silent work&quot; (patches, blocked threats, automated fixes) completed behind the scenes.</li><li>Audit client environments for &quot;drift&quot;&mdash;identifying workstations or servers that don't meet our security or performance standards&mdash;and direct remediation efforts.</li></ul>Qualifications<ul><li>Experience: 5+ years of IT experience, with at least 3 years specifically focused on RMM administration and security operations. Prior experience leading, mentoring, or acting as a technical escalation point for a team is highly preferred.</li><li>The Scripting Wizard: Expert-level proficiency in PowerShell. You should be able to automate complex tasks that save the team dozens of hours a week and guide others in scripting best practices.</li><li>Security Mindset: Deep understanding of the modern threat landscape, including the MITRE ATT&amp;CK framework and common attack vectors.</li><li>Toolbox Experience: Advanced, hands-on experience with ConnectWise RMM (or similar tools like NinjaOne, DattoRMM) and EDR/MDR tools</li><li>Analytical Detective: You enjoy digging through logs and dashboards to find the &quot;needle in the haystack&quot; and possess the communication skills to explain findings clearly to both technical staff and clients.</li><li>Documentation: You believe that if an automation or procedure isn't documented, it doesn't exist, and you hold the team to that same high standard.</li></ul>Pay: $55,000.00 - $75,000.00 per yearBenefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Flexible spending account</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Vision insurance</li></ul>Work Location: In person

SOC Lead

Apple

Do you want first crack at new Apple Pay products? Come help them be more secure by breaking them first! 
 
Join our Apple Pay Security Engineering team and help us deliver the safest and best user-experience. We work on Payments, Transit, Access, &amp; Identity, across hardware, software, and server. If you're passionate about digital security and customer safety, we may have the job for you. 
 
Description 
 
You're a security engineer at heart: a pentester who breaks hardware, software, and services to find what others miss. You use AI to move faster and improve the tooling as you go: not shipping product features but building the Skills, Agents, and workflows that make our security testing sharper. Above all, you can disagree with the AI, prove it wrong, and make it better instead of rubber-stamping its results.&quot;,&quot;responsibilities&quot;:&quot;Develop AI workflows to perform security review and security testing 
 
Develop Skills and Agents that instill security best practices into every phase of the SDLC: design, implementation, review, build/CI-CD, and post-launch 
 
Threat model development and secure design assessment of hardware and software 
 
Hands-on testing of hardware and software 
 
Validate and challenge AI findings, not just consume them 
 
Preferred Qualifications 
 
Superior problem solving and debugging skills 
 
Understanding of the use of various cryptographic algorithms (RSA, AES, SHA, etc.) 
 
Able to clearly communicate across many teams (Can you nicely tell the developer that they have a bug?) 
 
Ability to propose new designs and architectural improvements (Can you redesign what you just broke?) 
 
Experience either shipping software or integrating security into every stage of the software lifecycle. 
 
Minimum Qualifications 
 
Drive and agency: You know how to use tools to learn new areas, experiment, and develop security issue discovery capabilities. You&rsquo;re curious and interested in learning new areas. You have a sense of ownership and pride in improving the environment. 
 
Security engineering foundation: You&rsquo;ve threat modeled hardware and/or software designs, determining where attacks would come from and what protections exist in a design. You&rsquo;ve performed hands-on security testing (pentesting, negative testing, or equivalent). You&rsquo;re skilled at security code reviews. 
 
AI/agentic fluency: You have hands-on experience using agentic/LLM-based coding tools. You&rsquo;re able to build and refine Skills, Agents and AI workflows, not just operate them. You&rsquo;re able to independently verify or refute a finding rather than accept it at face value 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $181,100 and $318,400, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Security Engineer - Apple Pay

Search 4727+ Security automation engineer jobs near you this June. New roles added regularly across leading industries. Apply today.

4727 security automation engineer jobs Near Me

Security Engineer (Bangkok Based, Relocation Support)

Security Engineer (Bangkok Based, Relocation Support)

Security Engineer (Bangkok Based, Relocation Support)

Sr Lead Security Engineer - Workforce

MANAGER - CYBER SECURITY

SOC Lead

Security Engineer - Apple Pay