{"id":3851908,"url":"https://alion.io/job/agoda-staff-ai-security-engineer","title":"Staff AI Security Engineer","company":{"id":200,"name":"Agoda","domain":"agoda.com","url":"https://alion.io/company/agoda","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":76,"open_postings":75,"ghost_share":0.027,"stale_share":0.667,"repost_share":0.067,"time_to_fill_p50_days":61,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":10900,"max":16300,"currency":"SGD","period":"month","gross":null,"usd_annual":153120},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Cursor","optional":false},{"name":"Function Calling","optional":false},{"name":"Go","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Kotlin","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"Node JS","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-11-06T02:54:03Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-06T12:33:08Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Agoda\nAt Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. \nToday, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.\nNo two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.\nGet to Know Our Team \nThe Security Department oversees application security, compliance, GRC, and security operations for all Agoda. We are vigilant in ensuring there is no breach or vulnerability threatening our company or endangering our employees in order to keep Agoda safe and protected. This would be a great challenge for those who want to work with the best technology in a dynamic and advanced environment. \nThe Opportunity \nYou will be joining the AppSec Engineering team at a pivotal moment: AI is changing both how we defend Agoda and what we need to defend. As an AI Security Engineer, you will build AI-powered security engineering capabilities that let a lean team secure a fast paced DevSecOps environment where code ships continuously, and you will make sure the AI systems and agents Agoda builds are secure by design. This is a builder's role with a primary focus on security engineering and threat modeling: you will ship and own production systems, not just own one-off scripts. \nWhat You Will Do \nDesign, build, and operateAI-powered security engineering systems, such as LLM-driven secure code review, finding triage and de-duplication, and automated fix suggestions, and own themend-to-end in production. \nBuild AI-assisted threat modeling that scales our design reviews: drafting threat models from design docs and architecture, flagging high-risk changes, and routing the reviews that need a human in the room. \nHarden the AI developer platforms our engineers use every day, such as Cursor, Codex and Claude, always-on agent platforms including MCP/plugin governance and policy controls. \nLead security design reviews and threat modeling for the AI systems and agents built at Agoda, including LLM-integrated products, RAG pipelines, MCP/tool integrations, and internal agentic platforms. \nDefine and implement security controls and guardrails for AI agents: agent identity and delegated credentials, least-privilege tool access, sandboxing, human-in-the-loop approval for risky actions, and audit logging. \nDevelop defenses against AI-specific threats such as prompt injection, data exfiltration through tools, insecure output handling, and model and supply chain risks, and turn them into secure-by-default patterns and standards for engineering teams. \nBuild agenticsecurity tooling that automates AppSec workflows end-to-end, from intake and risk scoring to ticketing and remediation tracking, keeping outcomes measurable, auditable, and safe. \nMeasure and continuously improve the quality of our AI security tooling (precision, coverage, false-positive rate) by tuning models, prompts, and pipelines. \nPartner with product, platform, data, and AI engineering teams as an embedded security owner, and work closely with AppSec analysts to turn their findings into scalable, automated fixes. \nStay ahead of AI security research and industry frameworks, andshare what you learn across Agoda's engineering community. \nWhat You Will Bring \nSoftware engineering and production systems: Strong software engineering foundations, with at least 3 years of SDLC experience in Python, Go, TypeScript/Node.js, Kotlin, or similar, and a track recordof building and operating production quality systems. \nSecurity expertise: At least 6 years of relevant experience across security engineering, application security, threat modeling, secure coding, identity and access management, software development, or cloud security. Strong knowledge of secure design for distributed systems and microservices, OWASP Top 10 vulnerabilities and code level remediation, OAuth 2.0/OIDC, service to service authentication, and least privilege. \nCloud and AI security: At least 2 years of experience with public or private cloud environments, and 1 year of hands onexperience building LLM enabled applications, agents, tool calling/MCP, RAG, or evaluation pipelines. Understand key AI and LLM risks, including prompt injection, excessive agency, sensitive data leakage, and insecure output handling, with familiarity with OWASP Top 10 for LLM Applications or MITRE ATLAS. \nSecurity mindset: Applies an analytical, offensive security mindset to identifyand understand how vulnerabilities are discovered and exploited. Uses AI thoughtfully as part of their work, exercises autonomy in ambiguous problem spaces, and communicates technical and nontechnical concepts effectively to diverse audiences. \nIt is Great if You Have \nExperience securing agentic, code-execution, or LLM-integrated systems in production (sandboxing, isolation, guardrails). \nExperience building developer-facing security tooling or security automation integrated into CI/CD. \nExperience with LLM evaluation or red-teaming of AI systems, or contributions to AI security research, open-source tools, or community frameworks. \nFamiliarity with AI governance and risk frameworks such as NIST AI RMF or ISO/IEC 42001. \nSalary and Location \nThis role is based in Singapore. \nMonthly base salary: SGD 10,900-16,300 \n\nPlease review our Hiring Process Guidelines before your interview - click here to learn how interviewing at Agoda works.\nDiscover more about working at Agoda\nAgoda Careers https://careersatagoda.com\nFacebook https://www.facebook.com/agodacareers/\nLinkedIn https://www.linkedin.com/company/agoda\nYouTube https://www.youtube.com/agodalife\nEqual Opportunity Employer \nAt Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.\nWe will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.\nDisclaimer\nWe do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.","description_format":"text","description_chars":7259,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Travel Agencies","Travel Technology"],"lifecycle":[{"event":"open","at":"2026-11-06T03:52:20Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":61,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":153120,"is_top_pay":false},"html_url":"https://alion.io/job/agoda-staff-ai-security-engineer","json_url":"https://alion.io/job/agoda-staff-ai-security-engineer.json","meta":{"generated_at":"2026-11-06T13:06:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23976,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":200},"rest":"https://alion.io/mcp/rest/get_company?id=200"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fagoda-staff-ai-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fagoda-staff-ai-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fagoda-staff-ai-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/agoda-staff-ai-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fagoda-staff-ai-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3851908}},{"tool":"search_jobs","arguments":{"company":"agoda.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3851908},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}