IT Security Engineer

Job Title: IT Security Engineer (Senior STEM Infrastructure Service)

Department: Information Technology

Reports To: Assistant Department Head – Infrastructure Services

Location: Bangkok

Employment Type: Full time - Hybrid

Key Responsibilities

• Monitor, analyze, and respond to cybersecurity incidents.

• Use and manage security tools such as SIEM, EDR/XDR, IDS/IPS, and security logs.

• Assess and track vulnerabilities in network devices, systems, and applications.

• Work with relevant teams to plan and carry out patch management and updates.

• Conduct vulnerability scans and penetration testing (Vulnerability Assessment & Penetration Testing).

• Support the development and implementation of security policies, standards, and governance, risk, and compliance (GRC) requirements.

• Install, maintain, update, and troubleshoot Linux and Windows Server systems, covering both hardware and software.

• Conduct training and build organization-wide security awareness.

• Manage user permissions, Group Policy, and access control.

• Perform system hardening and oversee related security software and services within the organization.

• Track emerging trends in AI-related cybersecurity threats (e.g. AI-enabled cybercrime, deepfakes, generative AI) and apply AI capabilities to threat detection, analysis, and other IT security functions such as automation for incident response.

Qualifications

• Bachelor's degree or higher in Computer Engineering, Computer Science, Information Technology, Management Information Systems, or a related field.

• 2–4 years of relevant experience, including at least 2 years in IT Security and at least 2 years administering and troubleshooting Linux and Windows Server systems.

• Skilled in applying AI to manage, detect, analyze, and enhance internal IT security systems (e.g. AI threat detection, automation for incident response).

Good to have

• Knowledge of enterprise networking and security tools (e.g. Cisco/Arista, Palo Alto/Fortigate firewalls).

Understanding of security frameworks and standards such as ISO 27001, NIST CSF, and CIS Controls.

• Good command of English.

• Strong interpersonal skills, a good team player, and eager to keep learning new things.