DevSecOps Engineer (Bangkok based, relocation provided)

Salary Not Specified

Agoda, Edinburgh

Full time
Permanent
Onsite working

Posted 2 weeks ago, 1 Sep | Get your application in now before you miss out!

Closing date: Closing date not specified

job Ref: d98a5c7ea6a144728a8463b6a0d0f7ef

Agoda

Full Job Description

Agoda's DevOps department is a vibrant and synergistic collective, comprised of highly proficient engineers with expertise across various domains. We're dedicated to improving the developer productivity by providing best-in-class developer experience through seamless integration of development and operations. Our team works on comprehensive full-stack solutions, overseeing projects from conceptual design to the deployment of functional applications. This includes crafting intuitive user interfaces, robust APIs, core system functionalities, and implementing scalable data storage solutions across a distributed network. We work with the security team to provide a platform and company-wide integrations. Our work affects all the IT department at Agoda, turning even minor issues into exciting challenges due to the scale and speed we operate at.

The Opportunity:

DevSecOps Engineer is a pivotal role within our DevOps organization. You will be responsible for development and implementation with the focus of providing security as a platform. You will be a key contributor to the team and it would require broad knowledge of the technology stack across the industry. You will have the opportunity to be impactful across the entire SDLC process. For you to succeed in this role, you should strive to balance the industry best-practice with Agoda's scale. A developer-centric approach is essential, as you will be expected to empathize with and address the needs of our development teams, fostering a culture where security is ingrained in every aspect of our workflow.

In this Role, you'll get to:

Maintain CI/CD best practices and automate security testing at the speed of DevOps on a very large scale (:1M pipelines a month)

Design, implement, and monitor in-house built security tooling chain

Maintain a platform that includes a complex automated security scoring system for every development component at Agoda

Excellent coding skills in a modern programming language (preferably Go, Rust, or Python)

Software architecture design skills for achieving high availability and fault tolerance

Knowledge of network security and application security concepts

Familiarity with development ecosystem tooling: Git, CI, Docker, Kubernetes

Experience with Linux system administration

Passion for learning cutting-edge technologies and automating large scale processes

Excellent collaboration and communication skill

Familiarity with secure coding best practices

Experience utilizing modern CI systems (e.g., GitLab CI, GitHub Actions, CircleCI, Jenkins)

Advanced Kubernetes & Docker knowledge (plus points for experience with k8s operator development)

Experience working with a service mesh

Configuration management experience (e.g., Ansible, Terraform)

Extended knowledge in securing an application security in CI/CD (e.g., SAST, DAST)

Experience coding a full-stack application (preferably with React.js and Go)

Experience with HashiCorp tools (Consul, Vault, Terraform)

Experience with both SQL and NoSQL databases (PostgreSQL, Elasticsearch, MSSQL)