Teams at Agoda

Lead application and AI security efforts, including vulnerability triage, zero-day response, penetration testing, AI agent security testing, and automated CI/CD security checks. Build production-grade AI tooling for AppSec, assess prompt injection and data leakage risks, coordinate remediation, define AI governance controls, and mentor junior analysts. The role requires strong web and API security expertise, vulnerability management, software supply-chain knowledge, and hands-on experience building LLM-based security tools.

Build and operate AI-powered application security systems, including secure code review, threat modeling, vulnerability triage, remediation automation, and agent governance. Lead security design reviews for LLM, RAG, MCP, and agentic systems; implement identity, access, sandboxing, audit, and guardrail controls; defend against AI-specific threats; and partner with engineering teams to improve secure-by-default practices and measurable AppSec outcomes.

Design, build, and operate generative AI services, agents, and applications for Agoda teams. Own solutions end-to-end, from understanding user needs and selecting technical approaches through testing, release, and production support. Improve AI quality, reliability, latency, and cost using evaluations, monitoring, and feedback. Build secure, reusable APIs and integrations, lead technical decisions, and mentor engineers. The role requires extensive software engineering and GenAI experience, production systems expertise, and cross-functional collaboration.