Senior Incident Response Specialist, Bangkok Based

Senior Incident Response Specialist, Bangkok Based (Relocation Provided)

Join to apply for the Senior Incident Response Specialist, Bangkok Based (Relocation Provided) role at Agoda.

Location: Bangkok, Thailand. Relocation package is provided if you relocate to Bangkok. Hybrid working model with WFH options and global benefits.

Agoda is an online travel booking platform for accommodations, flights, and more. We build and deploy cutting-edge technology that connects travelers with a global network of hotels and holiday properties worldwide, plus flights, activities, and more. We are part of Booking Holdings with 7,100+ employees across 27 markets, fostering a diverse, creative, and collaborative environment. We innovate through experimentation and ownership to enhance the travel experience for our customers.

We are looking for an industry-experienced, highly motivated, and self-driven Incident Response Specialist who can rapidly address security incidents and threats as they appear, with the ability to strategize and lead incident engagements with all staffing levels. On the ground level, you will monitor threats targeting Agoda and work to prevent attacks from occurring or from worsening.

• Perform end-to-end handling of all critical, high and medium cybersecurity incidents at Agoda
• Draft incident reports and communicate incident summaries to senior leadership, end users, and legal teams
• Write playbooks for different incident types and use automation to reduce MTTR
• Automate repetitive incident response tasks using automation platforms and/or programming
• Optimize existing security controls to fine-tune alerts and reduce false positives
• Gather open source and commercial threat intelligence and perform hunting across the enterprise for undetected threats
• Support legal and regulatory teams as a technical SME for cyber incidents with regulatory requirements
• Evaluate new technologies and drive POCs for new security products

Note: You will be expected to leverage coding skills to develop and automate solutions that enhance Detection and Response capabilities. Proficiency in understanding and writing code is essential for building and maintaining response automation tools.

• 5+ years of experience in Cyber Security, specifically Incident Response, and experience with 24/7 SOC teams
• Strong understanding of NIST, CSF, MITRE and other cybersecurity frameworks
• Programming or scripting skills (e.g., Python or C++) for automating incident response tasks and developing custom security tools
• Ability to write and tune detection rules in different security platforms
• Hands-on experience dealing with major security incidents
• Automation skills using automation platforms or programming
• Malware analysis and digital forensics experience is a plus
• Certifications such as CISSP, ECSA, GISP, GCIH, GCFE, GCFA are a plus
• Flexible, fast-moving, adaptable, multi-tasking expert with strong English communication
• Relocation to Bangkok is available; hybrid working model and benefits include WFH allowance and 30 days remote work from anywhere globally each year
• Global benefits: employee discounts, CSR/Volunteer time off, Headspace, Odilo & Udemy subscriptions, EAP, enhanced parental leave, and life/TPD/accident insurance

Equal Opportunity Employer: Agoda values diversity and is committed to providing equal employment opportunities regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, or other legally protected characteristics. We will keep your application on file for future opportunities and you can request removal at any time. Details are in our privacy policy.