Staff AI Security Analyst

Home > Python programming jobs

Staff AI Security Analyst in Others new

Agoda
Full time
Email

Others
11/07/2026
Report

Singapore, Singapore

Responsibilities

Own daily triage of scanner, bug bounty, and penetration-testing findings, prioritize remediation using exploitability and business impact, and drive fixes to verified closure.
Assess exposure to zero-day and newly disclosed vulnerabilities, coordinate urgent patching or mitigation, and track affected services through closure.
Lead manual and AI-assisted penetration tests of web, API, mobile, and AI applications, including testing for prompt injection, jailbreaks, tool abuse, and data leakage.
Design adversarial and automated security checks for CI/CD and adjust testing priorities based on AI-enabled attacker capabilities.
Build and own production AI agents that automate application-security work and measure triage accuracy, time saved, and false-finding rates.
Contribute to the AI AppSec roadmap, define AI autonomy and approval boundaries, and mentor junior analysts.

Requirements

6–10 years of experience in application security, product security, or offensive security, including strong web and API penetration-testing skills and vulnerability management at scale.
Ability to validate and reproduce bug bounty and external researcher reports, recommend rewards, and prioritize remediation using CVSS, EPSS, KEV, and business context.
Deep understanding of dependency and software supply-chain risks, including SCA and SBOM practices, with experience responding to zero-day and high-profile vulnerabilities across large engineering organizations.
Hands-on experience building LLM tools or agents using Python, LLM APIs, RAG, or evaluation methods, and testing AI applications and agents.
Demonstrated ability to mentor others and lead technical work across teams.
Experience running or managing a bug bounty program, such as on HackerOne, is preferred.
Experience fine-tuning or adapting models for security tasks, working with MCP servers, agent frameworks, AI red-teaming tools, CI/CD security automation, developer workflows, and cloud-native application security is preferred.
Relevant certifications such as OSCP, OSWE, or GWAPT, published CVEs or research, and conference talks are advantageous.

Benefits

The role is based in Singapore.
Monthly base salary is SGD 10,900–16,300.

Agoda

At Agoda, we bridge the world through travel. We aim to make it easy and rewarding for more travelers to explore and experience the amazing world we live in. We do so by enabling more people to see the world for less – with our best-value deals across our 6,000,000+ hotels and holiday properties,...

Similar positions

Software Engineer (GenAI)

AJ Bell
Full time

Remote
11/07/2026

United Kingdom

Staff Security Engineer

fal
Full time

USA
11/07/2026
Salary: $180k - $250k/yr

San Francisco, CA

Staff Software Engineer

Grafana Labs
Full time

UK
11/07/2026
Salary: £107k-£134k

Remote

ML/AI - Supply Chain

Samsara
Full time

USA
11/06/2026
Salary: $179k - $319k/yr

Remote

QA Engineering Lead (AI)

Meta
Full time

USA
11/06/2026
Salary: $138k - $191k/yr

Menlo Park, CA