Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted today

Senior AI Security Researcher

AGODA COMPANY PTE. LTD.

Pay
SGD 9,100 – SGD 13,700 a month
Where
Central, Singapore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior AI Security ResearcherAGODA COMPANY PTE. LTD. · Central, Singapore

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on AGODA COMPANY PTE. LTD.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.7% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.3%1 day
  2. 4.8%3 days
  3. 13.7%7 days
  4. 22.1%14 days
  5. 37.6%30 days
  6. 59.1%60 days
This job: posted today

The posting

Senior AI Security Researcher

Singapore

About Agoda

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.

Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.

No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you're ready to begin your best journey and help build travel for the world, join us.

Get to Know Our Team

The Security Department oversees security, compliance, GRC, and security operations for all Agoda. We are vigilant in ensuring there is no breach or vulnerability threatening our company or endangering our employees in order to keep Agoda safe and protected. This would be a great challenge for those who want to work with the best technology in a dynamic and advanced environment.

The Opportunity

We are looking for an AI Security Researcher with a strong offensive security mindset, published CVEs, and the ability to use AI as a hacking tool. The core of this role is finding real exploitable issues before attackers do, prioritizing external (internet-facing) exploits, then internal ones.

You will build autonomous agents that research and hack on the fly by interacting with AI, and you will jailbreak AI systems.

The ideal candidate has a strong offensive security background, has already shifted to using AI to find bugs, and is already hands-on and comfortable working this way.\

What You Will Do

  • Proactively identify and exploit vulnerabilities in internet-facing and internal systems, delivering working proofs of concept, clear impact assessments, and actionable findings.
  • Conduct offensive security testing of AI products and infrastructure, including jailbreaks, prompt injection, model evasion, data exfiltration, API abuse, and MCP, plugin, and tool-calling integrations.
  • Build and automate AI-assisted security research workflows and agents that use models, APIs, and tools to continuously discover and validate vulnerabilities.
  • Research weaknesses in models and surrounding infrastructure, producing high-quality findings, including CVE-ready research where appropriate.
  • Design, implement, and evaluate guardrails and other defensive controls—such as filtering, policy enforcement, monitoring, and anomaly detection—to reduce AI security risks.
  • Partner with product and engineering teams to turn findings into practical requirements, fixes, and mitigations.
  • Document and communicate technical findings, risk, and impact to cross-functional teams and senior stakeholders; share emerging AI attack and defense techniques.

What You Will Bring

  • Bachelor's degree in computer science or a related field, or equivalent practical experience.
  • 4+ years of offensive security experience, including API security testing, penetration testing, red teaming, or adversarial testing.
  • At least one published CVE(s) or verified HackerOne bug-bounty finding.
  • Must have published security research, presented at a conference, or maintained a personal technical blog demonstrating relevant cybersecurity expertise.

It is Great if You Have

  • At least 1 year of hands-on AI security testing experience, including jailbreaks, prompt injection, role confusion, data leakage, or safety bypasses.
  • Examples of using AI models or agents to discover or exploit vulnerabilities.
  • Experience building autonomous agents that interact with AI to attack or test systems on the fly.
  • Already using AI in day-to-day offensive work to find bugs, and comfortable with that shift.
  • Ability to collaborate across teams and communicate risk and impact to technical and non-technical stakeholders, including senior leaders.
  • Fluent spoken and written English, with the ability to explain technical findings clearly to diverse audiences.
  • Experience developing and maintaining production-quality code.

Salary and Location

This role is based in Singapore.

Monthly base salary: SGD 9,100-13,700

Please review our Hiring Process Guidelines before your interview - click here to learn how interviewing at Agoda works.

Discover more about working at Agoda

Agoda Careers https://careersatagoda.com

Facebook https://www.facebook.com/agodacareers/

LinkedIn https://www.linkedin.com/company/agoda

YouTube https://www.youtube.com/agodalife

Equal Opportunity Employer

At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person's merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.

Disclaimer

We do not accept any terms or conditions, nor do we recognize any agency's representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.

Posting text belongs to the employer. Removal requests: contact us.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against AGODA COMPANY PTE. LTD.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on AGODA COMPANY PTE. LTD.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    AGODA COMPANY PTE. LTD.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.