security infrastructure engineer

Agoda

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript.
 
 
 
 Key Responsibilities:
 
 
 
 Secure Cloud Deployment:
 
 
 <ul>
 <li>
 Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
 </li>
 <li>
 Kubernetes &amp; GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.
 </li>
 <li>
 Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
 </li>
 <li>
 Security Automation &amp; Tooling: Design and build security tooling and services using Go and TypeScript.
 </li>
 <li>
 Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
 </li>
 <li>
 Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
 </li>
 <li>
 Threat Detection &amp; Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience:
 
 
 
 <ul>
 <li>
 8+ years of experience in security engineering, cloud security, or platform engineering roles.
 </li>
 <li>
 Hands-on experience securing production workloads in AWS and GCP.
 </li>
 <li>
 Strong experience designing and securing Infrastructure as Code using Terraform.
 </li>
 <li>
 Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
 </li>
 <li>
 Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
 </li>
 <li>
 Experience embedding security controls into CI/CD pipelines.
 </li>
 <li>
 Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security
 </li>
 <li>
 Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate
 </li>
 <li>
 Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
 </li>
 <li>
 Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Security Engineer (Bangkok Based, Relocation Support)

Abile Group, Inc.

<div>Overview:
<div>
Abile Group has an exciting and challenging opportunity for an Endpoint Security Engineer on a contract providing Network and Cybersecurity services supporting an Intelligence Community customer. All the personnel on the team will work together to support transport and cybersecurity information technology (IT) services on multiple networks and security domains, at multiple locations worldwide, inclusive of new facilities and building constructions to support the IC mission.</div><div></div><div> 
The right candidate will possess the below skills and qualifications and be ready to handle all responsibilities independently and professionally.</div>
Responsibilities:
<ul><li>Implements and applies technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access.</li><li>
Provides engineering and sustainment support for the various endpoint security solutions.</li><li>
Establishes computing environment by designing system configuration, directing system installation, and defining, documenting, and enforcing system standards.
</li><li>Provides specific, detailed information for hardware and software selection, implementation techniques, and tools for the most efficient solution to meet business needs, including present and future capacity requirements.
</li><li>Configures and installs various security products utilizing Linux OS.</li><li>
Works with both the software vendor and the customer to research, analyze, and implement enterprise-wide security solutions/capabilities/enhancements to support customer business/mission goals and objectives</li><li>
Assists with design, analysis, testing and implementation of state-of-the-art secure architectures</li><li>
Oversees security infrastructure sustainment, maintenance, and advanced configuration (policy management, database administration and security management tools)</li><li>
Oversees the reporting, documentation and investigation of all security related incidents; lead the development and implementation of corrective measures</li></ul>
Qualifications:
<div>
Clearance Required: TS/SCI with ability to obtain and maintain a CI poly</div><div></div><div> 
Degree and Years of Experience: Bachelor&rsquo;s degree (Engineering, Computer Science or related field) with 6 years additional experience. Additional experience may be considered in lieu of a degree.</div> 
<ul><li>
10 years of technical experience in Cyber Security</li></ul><div>
Required Certifications:
</div><ul><li>DoD 8570 IAT Level II certified (current)</li><li>
Must obtain a CSSP Infrastructure Support certification within 6 months of hire date</li></ul><div>
Desired Certifications:
</div><ul><li>CSSP Infrastructure Support certification</li><li>
Any Linux related certifications</li></ul><div>
Required Skills:
</div><ul><li>Working knowledge of maintaining Enterprise Cyber Security Engineering requirements utilizing all or some of the following tools: Trellix, HBSS, Carbon Black Response/Protection, Microsoft ATA, Tanium</li><li>
Strong working knowledge of administering applications in a Linux environment</li><li>
Experience with large-scale enterprise/global networks in a high-paced, diverse environment 
</li><li>
Understanding of and experience with the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions 
</li><li>
Experience in providing status reports and products to senior management and customers</li><li>
Experience with plans, designs, and evaluations of security systems and architectures</li></ul><div>
Desired Skills:</div><ul><li>
Windows Enterprise Active Directory (AD) architecture and VMWare virtualization</li></ul>
About Abile Group, Inc.:
<div>
Abile Group LLC was formed in July 2004 to partner with the Intelligence Community and their Contractors in the areas of Enterprise Analytics &amp; Performance Management, IT &amp; Systems Engineering and Program &amp; Project Management. We have significant experience with the Federal Government and are an EDWOSB dedicated to our employees and clients. We are looking for high performing employees who enjoy providing advice and guidance along with solutions development and implementation support, crafted by combining industry best practices with the clients&rsquo; subject matter experience and Abile&rsquo;s breadth of expertise.</div>
Hiring Statement:
<div>
Abile is committed to hiring the most qualified and best fit person for the job - always has, always will. Anyone requiring reasonable accommodations should email careers@abilegroup.com with requested details. A member of the HR team will respond to your request within 2 business days.</div><div></div><div> 
Please review our current job openings and apply for the positions you believe may be a fit. If you are not an immediate fit, we will also keep your resume in our database for future opportunities.</div></div>

Endpoint Security Engineer

Xenon7

<div>Location: Cairo, Egypt (100% On-Premise)
Contract Duration: 6 Months (Extendable)
Employment Type: Contract
About us:
Where elite tech talent meets world-class opportunities!
At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today&rsquo;s most complex challenges.
About the Client:
Join one of Egypt&rsquo;s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery.
Job Summary:
This role covers highly technical disciplines within InfoSec: security architecture, engineering review, and the maturation of vulnerability and patch management systems. The specialist works closely with internal Security Architecture managers and the Security Operations Center (SOC) team to strengthen the bank's detection and defensive posture, ensure new infrastructure designs are secure by design, and fully operationalize the vulnerability management lifecycle.
Key Responsibilities:
A. Security Architecture &amp; Engineering Assessment<ul><li>Review new and changed system designs, network architectures, and digital platform builds from an</li></ul>
information security perspective, prior to build or procurement approval.<ul><li>Produce Security Architecture Review Reports with risk-rated findings, threat model summaries, and</li></ul>
design recommendations aligned to security standards and CBE requirements.<ul><li>Assess security of APIs, cloud components, integration layers, and digital banking platforms (mobile,</li></ul>
internet banking, payment processing) against OWASP, NIST, and CBE guidelines.<ul><li>Maintain an architecture review register tracking all submitted designs, decisions, and open risk items.</li><li>Contribute to the InfoSec reference architecture and security design patterns library.</li></ul>
B. Tenable SC &mdash; Vulnerability &amp; Patch Management<ul><li>Take ownership of Tenable Security Center (SC) and other vulnerability solutions configuration, scan</li></ul>
policy design, and coverage assurance across full asset inventory.<ul><li>Design and implement a structured vulnerability management workflow &mdash; scan, triage, risk-rate, assign,</li></ul>
track, and verify remediation &mdash; integrated with IT's patch management process.<ul><li>Produce weekly and monthly vulnerability dashboards for IT and InfoSec leadership showing patch SLA</li></ul>
compliance, critical exposure trends, and remediation velocity.<ul><li>Define and enforce scan coverage SLAs: all in-scope assets scanned at appropriate frequency per asset</li></ul>
criticality tier.<ul><li>Identify and escalate monitoring blind spots &mdash; unscanned, uncredentialed, or unreachable assets &mdash; and</li></ul>
drive resolution with IT.<ul><li>Enable Tenable SC reporting to feed directly into KRI metrics for board-level visibility on patch SLA</li></ul>
breach rate and vulnerability exposure. 
Requirements<ul><li> 
Minimum 8 years in information security with strong hands-on technical depth across at least two of the</li></ul>
three disciplines in this role.<ul><li>Proven Tenable SC (or Tenable.io) administration and workflow design experience &mdash; must be able to</li></ul>
demonstrate scan configuration, policy tuning, and dashboard creation.<ul><li>Experience conducting security architecture reviews for banking or financial sector projects.</li><li>Practical threat hunting experience using SIEM and EDR platforms with documented hunt outputs.</li><li>Familiarity with MITRE ATT&amp;CK framework and its application to threat hunting and detection</li></ul>
engineering.
Preferred Certifications<ul><li>Tenable Certified Security Engineer (TCSE) or Tenable.sc Specialist</li><li>GIAC Certified Enterprise Defender (GCED) or GIAC Certified Threat Intelligence Analyst (GCTI)</li><li>CISSP &mdash; Certified Information Systems Security Professional</li><li>SABSA Chartered Security Architect (SCF or SCP)</li></ul>
Preferred Experience<ul><li>Experience in Egyptian banking or financial institution regulated by CBE.</li><li>Hands-on with F5 AWAF, Palo Alto, or equivalent network/application security controls from an</li></ul>
assessment perspective.<ul><li>Familiarity with NIST CSF 2.0 and CBE Cybersecurity Framework control domains.</li></ul> 
Benefits 
<ul><li>
Attractive, market-leading salary package</li><li>
Clear career advancement path with professional development opportunities</li></ul></div>

Security Architecture, Engineering & Threat Operations Lead - Banking

MERCOR

<div><h2 class="jobSectionHeader">About Mercor</h2>
Mercor's mission is to organize human intelligence to power the AI economy. We partner with leading AI labs and enterprises to provide the human intelligence essential to AI development. Our vast talent network trains frontier AI models in the same way teachers teach students: by sharing knowledge, experience, and context that can't be captured in code alone. Today, more than 30,000 experts in our network collectively earn over $3 million a day.
Mercor is creating a new category of work where expertise powers AI advancement. Achieving this requires an ambitious, fast-paced and deeply committed team. You&rsquo;ll work alongside researchers, operators, and AI companies at the forefront of shaping the systems that are redefining society. Mercor is a profitable Series C company valued at $10 billion. We work in-person five days a week in our San Francisco, NYC, or London offices.
You'll own cloud and infrastructure security at a company where tenant isolation is a critical enterprise requirement. Mercor's customers - including frontier AI labs - need hard guarantees that their data stays within strict boundaries. This is not a compliance checkbox role. You'll architect multi-account AWS isolation, harden Kubernetes clusters, deploy cloud security posture management, and build the infrastructure that lets Mercor serve enterprise clients who demand the highest security bar.
We use AI heavily in our own security work. You should be comfortable building alongside AI code-gen tools, using LLMs to accelerate infrastructure review and policy authoring, and automating away the repetitive work that slows infrastructure security down. If you'd rather write a Terraform module than fill out a spreadsheet, you'll fit in here.
We're in-person five days a week at our SF headquarters, with first Fridays remote.<h3 class="jobSectionHeader">
What You'll Build:</h3><ul><li>
Multi-account AWS tenant isolation architecture - dedicated accounts, SCPs, network boundaries, and data segregation for enterprise clients</li><li>
Cloud security posture management using Wiz CSPM - continuous monitoring, misconfiguration detection, and automated remediation</li><li>
Kubernetes security hardening - pod security standards, network policies, secrets management, and runtime protection</li><li>
Infrastructure-as-code security guardrails - Terraform/CloudFormation policies that prevent insecure deployments before they reach production</li><li>
IAM architecture and least-privilege access controls across AWS, Snowflake, and internal services</li><li>
Incident response infrastructure - logging pipelines, forensic readiness, and blast radius containment</li></ul><h3 class="jobSectionHeader">
What We're Looking For</h3><ul><li>
Deep AWS security expertise - you've architected multi-account strategies, written SCPs, and hardened production environments</li><li>
Experience with Kubernetes security in production - not just tutorials, you've secured real clusters running real workloads</li><li>
Strong infrastructure-as-code skills - Terraform, CloudFormation, or Pulumi - you think in code, not console clicks</li><li>
Experience with CSPM/CNAPP platforms (Wiz, Prisma Cloud, or similar) - deploying, tuning, and driving remediation</li><li>
Understanding of network security at the cloud level - VPCs, security groups, transit gateways, PrivateLink</li><li>
You've designed tenant isolation for multi-tenant SaaS - data segregation, compute isolation, network boundaries</li><li>
5+ years of professional experience in cloud security, infrastructure security, or platform/SRE engineering with a strong security focus</li></ul><h3 class="jobSectionHeader">
Bonus Points</h3><ul><li>
Experience with Snowflake security - schema-level isolation, access controls, data sharing governance</li><li>
Familiarity with container runtime security (Falco, SentinelOne Cloud Workload Protection, or similar)</li><li>
Offensive cloud security skills - you've exploited misconfigurations and understand the attacker's perspective</li><li>
Experience building compliance-ready infrastructure (SOC 2, ISO 27001, FedRAMP)</li><li>
You've handled cloud security incidents - forensics, containment, and root cause analysis in AWS</li><li>
Contributions to open source infrastructure security tools</li></ul><h3 class="jobSectionHeader">
Why Mercor</h3><ul><li>
The deliverable is concrete. Enterprise clients require tenant isolation as a baseline. You'll build infrastructure that directly enables the business.</li><li>
AI-native infrastructure security. You'll use frontier AI tools daily - for policy authoring, misconfiguration analysis, and anything that benefits from an AI co-pilot.</li><li>
Ownership from day one. You'll own the entire cloud security domain - from AWS architecture to Kubernetes hardening to CSPM operations.</li><li>
See the future early. Working alongside AI labs means you'll understand frontier model capabilities months before the market.</li></ul>
Benefits<ul><li>
Bi-annual performance bonus structure</li><li>
Generous equity grant vested over 4 years</li><li>
Up to $15k Relocation bonus</li><li>
$10K housing bonus (if you live within 0.5 miles of our office)</li><li>
$1.5K monthly stipend for meals</li><li>
Free Equinox membership</li><li>
$200 monthly laundry reimbursement</li><li>
$200 monthly personal wellness reimbursement</li><li>
Health, Dental, Vision insurance</li></ul>
Compensation Range: $130K - $400K</div>

Security Engineer, Cloud Infrastructure

noon

<div>
 
 
 About noon
 
 
 
 
 
 
 We&rsquo;re building an ecosystem of digital products and services that power everyday life across the Middle East&mdash;fast, scalable, and deeply customer-centric. Our mission is to deliver to every door every day. We want to redefine what technology can do in this region, and we&rsquo;re looking for a Cloud Security Engineer who can help us move even faster.
 
 
 noon&rsquo;s mission: Every door, every day
 
 .
 
 
 
 
 
 
 
 What you'll do
 
 :
 
 
 Team noon has some of the fastest, smartest, and hardest-working people we've encountered. With a young, aggressive, and talented team, we're driving major missions forward.
 
 
 Noon's Group Cybersecurity is looking for a Security Engineer, Cloud &amp; Operations to join our Cloud Security team. This is a hands-on engineering role, you will build cloud-native detections that catch real attacker behavior in GCP, deploy preventive controls at org scale, and investigate the SOC alerts your own detections generate. You write the detection rule, you investigate the alert it fires, and you convert findings into durable controls or tooling that prevents recurrence. We hire engineers who build, not analysts who configure.
 
 <ul>
 <li>
 Build and maintain cloud detection rules in SIEM and EDR including GCP-specific attack paths, and managing them through sandbox validation, retro hunts, false-positive elimination, and risk-scoring alignment.
 </li>
 <li>
 Design and deploy preventive WAF and cloud security controls
 </li>
 <li>
 Investigate security alerts and incidents from the SOC, determine root cause, support remediation with engineering teams, and reduce noise through systematic detection tuning and exemption strategies.
 </li>
 <li>
 Build and maintain internal cloud security tooling, security scanning pipelines, shipping cross-project services that scale across the group.
 </li>
 <li>
 Triage and tune EDR alerts, including detection policy adjustments, response workflow automation, playbook contributions, and endpoint investigation support.
 </li>
 <li>
 Build incident response automations based on established playbooks, including containment workflows, IR actions and isolation responses.
 </li>
 <li>
 Surface cloud security misconfiguration and work with engineering teams on IAM to right-size access without disruption.
 </li>
 <li>
 Partner with DevOps, IT, Product Security, and Offensive Security teams to operationalize cloud restrictions, onboard new environments, validate security controls, and provide evidence for compliance and audit requirements
 
 .
 
 </li>
 </ul>
 
 
 
 
 
 What you'll need
 
 :
 
 <ul>
 <li>
 2 to 4 years of experience in cloud security, detection engineering, security operations, or software engineering with a security focus.
 </li>
 <li>
 Hands-on experience with GCP security fundamentals: IAM, org policies, service accounts, Cloud Storage, Cloud Build, Cloud Run, or equivalent depth on another major cloud provider.
 </li>
 <li>
 Practical experience writing or maintaining detection rules in a SIEM platform (Splunk, Google SecOps, or similar), including rule authoring, testing, and false-positive management.
 </li>
 <li>
 Ability to investigate security alerts end-to-end: from initial triage through root-cause analysis, evidence collection, and supporting remediation efforts with relevant teams.
 </li>
 <li>
 Familiarity with at least one EDR platform (CrowdStrike Falcon or similar), including alert triage and basic detection tuning.
 </li>
 <li>
 Clear communication skills with the ability to document findings, write incident reports, and coordinate with cross-functional teams without requiring executive escalation.
 </li>
 <li>
 Comfortable working across multiple environments (production, staging, sandbox) and geographies with structured processes and attention to operational impact.
 </li>
 <li>
 Software engineering background preferred - production-quality coding capability in Python, Go, or similar. We want someone who builds tools and services.
 </li>
 <li>
 Experience in product-first, consumer internet, e-commerce, fintech, or marketplace environments - preferred
 </li>
 </ul>
 
 
 
 
 
 Who will excel?
 
 
 <ul>
 <li>
 We&rsquo;re looking for people with high standards, who understand that hard work matters.
 </li>
 <li>
 You need to be relentlessly resourceful and operate with a deep bias for action.
 </li>
 <li>
 We need people with the courage to be fiercely original.
 </li>
 <li>
 noon is not for everyone; readiness to adapt, pivot, and learn is essential.
 </li>
 </ul>
</div>

Security Engineer - Cloud & Operations

Search 4931+ Security infrastructure engineer jobs near you this June. New roles added regularly across leading industries. Apply today.

4931 security infrastructure engineer jobs Near Me

Security Engineer (Bangkok Based, Relocation Support)

Endpoint Security Engineer

Security Engineer (Bangkok Based, Relocation Support)

Security Engineer (Bangkok Based, Relocation Support)

Security Architecture, Engineering & Threat Operations Lead - Banking

Security Engineer, Cloud Infrastructure

Security Engineer - Cloud & Operations