Security Engineer / Senior Security Engineer (Contract)

About the role

Monitor, administer, and maintain enterprise security systems, including Endpoint Protection/Antivirus, IPS/HIPS, WAF, Web Gateway, Mail Gateway, DLP, Vulnerability Management, SIEM/Log Management, Certificate Authority, Key Management, and Patch Management. Monitor security alerts, system availability, and security infrastructure health to ensure continuous protection of IT systems and services. Investigate and respond to security incidents and alerts, including analysis, coordination, escalation, and resolution within agreed SLA. Analyze security events and potential threats, identify risks, and recommend improvements to security configurations, policies, and detection rules.

Key responsibilities

• Monitor, administer, and maintain enterprise security systems, including Endpoint Protection/Antivirus, IPS/HIPS, WAF, Web Gateway, Mail Gateway, DLP, Vulnerability Management, SIEM/Log Management, Certificate Authority, Key Management, and Patch Management
• Monitor security alerts, system availability, and security infrastructure health to ensure continuous protection of IT systems and services
• Investigate and respond to security incidents and alerts, including analysis, coordination, escalation, and resolution within agreed SLA
• Analyze security events and potential threats, identify risks, and recommend improvements to security configurations, policies, and detection rules
• Perform security system administration, configuration, backup, maintenance, troubleshooting, and operational support
• Coordinate with Helpdesk, Network, Infrastructure, and System teams to ensure security patches, antivirus definitions, and security controls are properly implemented and updated
• Support security audits, compliance assessments, vulnerability management, and security awareness activities
• Coordinate and communicate with international teams and stakeholders in English regarding technical issues, security incidents, and operational activities
• Provide on-site support for security-related activities when required

About you

• Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, Computer Engineering, or related fields
• 3–10 years of experience in Cyber Security, IT Security Operations, Security Administration, SOC, Security Engineering, or related roles
• Hands-on knowledge of security technologies such as SIEM, Endpoint Protection/Antivirus, IPS/IDS, WAF, DLP, Vulnerability Management, Web Security, and Mail Security
• Experience in Security Incident Response, Threat Analysis, Security Monitoring, Log Analysis, and Security Event Investigation
• Good understanding of Security Frameworks, IT Governance, Compliance Requirements, and Audit Processes
• Strong analytical, troubleshooting, and problem-solving skills with the ability to work effectively under pressure
• Good command of spoken and written English is required, with the ability to actively participate in meetings, coordinate with international teams, and communicate technical and security-related matters effectively
• Good communication and coordination skills in both Thai and English
• At least one professional certification required: CEH, CISSP, CISM, or CISA