Cybersecurity Engineer

Professional One Co., Ltd.

เขตราชเทวี

฿

80,000 - 120,000  บาท

5+  ปี

[email protected]

[02 619 2161 Ext. 2](tel:02 619 2161 Ext. 2)

รายละเอียด

จำนวน 1 อัตรา

สถานที่ทำงาน: ถนนเพชรบุรีตัดใหม่ แขวงมักกะสัน เขตราชเทวี กรุงเทพฯ 10400 ประเทศไทย

รายละเอียดงาน:
1 Security Architecture & Engineering

• Design, plan, and continuously improve the security architecture of networks, servers, cloud environments, and applications in line with international standards such as ISO 27001 and the NIST Cybersecurity Framework.
• Install, configure, and manage security tools and infrastructure, including firewalls, IPS/IDS, WAF, EDR/XDR, SIEM, DLP, and proxy solutions.
• Evaluate and select new security technologies and solutions to strengthen the organization's defenses against evolving threats.
• Define security architecture for cloud environments (IaaS, PaaS, SaaS).
  2 Security Analysis
• Analyze security events and anomalies through SIEM/SOC platforms on a 24x7 basis.
• Lead the response to and management of security incidents, from containment through recovery, and produce post-incident reports (RCA / lessons learned).
• Develop and maintain the Incident Response Plan, playbooks, and runbooks for various incident types.
• Coordinate with digital forensics teams and external parties in the event of major security incidents.
  3 Vulnerability & Risk Management
• Conduct and/or oversee regular vulnerability assessments and penetration testing.
• Analyze assessment results, prioritize risks, and coordinate remediation with relevant teams within agreed timeframes.
• Continuously monitor threat intelligence sources and assess their impact on the organization.
  4 Policy, Governance & Compliance
• Develop, review, and update cyber security policies, standards, and procedures.
• Support and prepare the organization for audits against standards such as ISO 27001, PCI-DSS, and data protection regulations (e.g., PDPA).
• Prepare and present security posture reports and KPIs to management and regulators on a regular basis.
  5 Team Leadership & Development
• Mentor, supervise, and transfer knowledge to junior/mid-level team members, including assigning work and reviewing quality.
• Act as project lead for assigned cyber security initiatives, from planning through delivery.
• Organize and deliver security awareness training programs for employees across the organization.
  6 Other Duties
• Liaise with external vendors and managed security service providers (MSSPs) on procurement and maintenance of security systems.
• Perform other duties as assigned by management.

คุณสมบัติผู้สมัคร:

• Bachelor's degree or higher in Computer Science, Computer Engineering, Information Technology, or a related field.
• At least 5 years of experience in Cyber Security / Information Security.
• Experience leading incident response efforts and/or acting as a team lead or project lead is highly preferred.
• Strong expertise in networking (TCP/IP, routing/switching), operating systems (Windows/Linux), and cloud platforms (AWS/Azure/GCP).
• Hands-on experience with security tools such as SIEM (Splunk, QRadar), firewalls (Palo Alto, Fortinet, Cisco), EDR/XDR, and vulnerability scanners (Nessus, Qualys).
• Solid understanding of security standards and frameworks such as ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK.
• Scripting/automation skills (Python, PowerShell, Bash) are a strong plus.
• Strong analytical, problem-solving, and decision-making skills under pressure.
• Excellent communication skills, able to engage effectively with both technical teams and senior management.
• Strong leadership capability, able to manage teams and projects effectively.
• Good command of English (listening, speaking, reading, writing).
• Willing to work outside normal hours or be on standby in the event of a security emergency.
• Preferred Certifications • CISSP, CISM, CEH, CompTIA Security+/CySA+, OSCP, GIAC (GCIH/GCIA), or equivalent

สวัสดิการ:

• ประกันสังคม
• OT