Infrastructure Security, Analyst

Job Purpose:

This role will support the organization's infrastructure and cloud security programs by monitoring security risks, coordinating vulnerability remediation, and assisting with security assessments and incident response activities. Work closely with technology teams to enhance security controls and protect critical systems and platforms.

Responsibilities:

• Monitor and coordinate remediation of infrastructure vulnerabilities identified through security scans and assessments across servers, endpoints, cloud platforms, and network environments.
• Work with infrastructure, cloud, network, and platform teams to ensure timely resolution of security findings and risks.
• Support security reviews and hardening activities for cloud platforms, containerized environments, Kubernetes clusters, and Azure Kubernetes Service (AKS).
• Monitor and track infrastructure security risks, remediation status, and compliance metrics, providing regular reporting to management.
• Assist with security assessments for infrastructure projects, cloud migrations, platform upgrades, and technology implementations.
• Support cybersecurity incident response, investigation, and containment activities related to infrastructure and cloud security events.
• Contribute to process improvement, automation, and security control optimization initiatives across infrastructure and cloud environments.

Qualifications:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.
• 2–5 years of experience in Infrastructure Security, Cybersecurity, IT Operations, Cloud Security, or System Administration.
• Good understanding of operating systems, networking, cloud security, vulnerability management, and security hardening practices.
• Experience securing cloud environments such as Microsoft Azure and supporting containerized platforms including Kubernetes and Azure Kubernetes Service (AKS).
• Familiarity with security technologies such as Microsoft Defender, CrowdStrike, Tenable, Qualys, Azure Security Center/Defender for Cloud, firewalls, and endpoint protection solutions.
• Experience coordinating vulnerability remediation and security compliance activities with infrastructure and technology teams.
• Relevant certifications such as Security+, AZ-500, SC-200, SC-100, Certified Kubernetes Security Specialist (CKS), CEH, or equivalent certifications are an advantage.

เพื่อให้เป็นไปตามมาตรฐานและนโยบายการคัดสรรบุคลากรของบริษัท เอไอเอ (ประเทศไทย) หลังผ่านการคัดเลือกแล้ว ผู้สมัครต้องได้รับการตรวจประวัติอาชญกรรมก่อนเริ่มงาน ทั้งนี้ บริษัทจะเก็บประวัติอาชญากรรมของท่านตามนโยบายข้อมูลส่วนบุคคลของบริษัท รายละเอียดตามลิงค์แนบ [https://www.aia.co.th/th/about-aia/privacy/candidate]

In accordance with recruitment policy and hiring standard of AIA (Thailand) Company Limited, after completing the selection process, you are required for criminal background check before joining the company. Your criminal record information will be retained according to the PDPA policy of the company. As per attached link [https://www.aia.co.th/th/about-aia/privacy/candidate]