Cyber Security Engineer

Cybersecurity Engineer

Job Purpose

We are looking for a motivated Cybersecurity Engineer to join our team and help protect the organizationʼs systems, networks, applications, and data from cybersecurity threats and fraud risks. This role will support security operations, monitoring, vulnerability management, incident response, fraud investigation, and security compliance while working closely with internal teams and external security providers.

Responsibilities

Security Operations & Monitoring

• Implement, maintain, and monitor security controls, including Firewall/WAF, EDR, VPN, Cloud Security, and endpoint protection.
• Monitor security alerts, logs, threats, and suspicious activities, and conduct security investigations.
• Manage and coordinate with MSSP / SOC-as-a-Service providers.

Vulnerability & Incident Management

• Manage vulnerability scanning, penetration testing, remediation tracking, and Bug Bounty activities.
• Respond to cybersecurity incidents, including investigation, containment, eradication, recovery, and root cause analysis.
• Develop and implement incident response plans to quickly and effectively respond to security incidents.
• Plan and conduct cybersecurity incident drills.

Access & Security Controls

• Monitor IAM, MFA, privileged access, and security controls for critical systems.
• Support regular access reviews and identify inappropriate or suspicious access.

Fraud & Threat Investigation

• Investigate suspicious activities and potential fraud cases.
• Analyze security, system, and transactional data to identify patterns, anomalies, and risks.
• Use security tools such as Nmap, Ncat, Burp Suite, Wireshark, or equivalent tools.

Risk, Compliance & Awareness

• Support cybersecurity risk assessments, third-party security reviews, audits, and regulatory requirements.
• Support security policies and standards aligned with ISO 27001, NIST, PDPA, and applicable regulations.
• Support Security Awareness Training and phishing simulations.
• Monitor cybersecurity threats and provide relevant security updates to the organization.

Work Requirements & Experience

• Bachelorʼs degree in Computer Science, IT, Cybersecurity, or related field.
• 5+ years of relevant experience in Cybersecurity, IT Security, Security Operations, Network Security, or related areas.
• Hands-on experience with security monitoring, vulnerability management, incident response, IAM, network security, and endpoint security.
• Good knowledge of MacOS, Linux, networking, web applications, and cloud platforms such as AWS or GCP.
• Familiarity with Cloudflare and security testing/investigation tools.
• Knowledge of ISO 27001, NIST, PDPA, GDPR, or other relevant security and privacy requirements.
• Strong analytical, troubleshooting, communication, and problem-solving skills.
• Strong in Thai and English communication skills, both written and spoken, with the ability to communicate effectively with internal teams, management, vendors, and external stakeholders.

Preferred:

• Positive attitude, proactive mindset, and strong leadership qualities.
• Experience in fintech, financial services, cryptocurrency, or digital asset environments.
• Knowledge of blockchain security, secure coding, Python/JavaScript, or threat intelligence tools.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, Security+, CySA+, CEH, or GSEC.