Security Specialist

Role Purpose

The role supports Thailand's telecom environment by engineering, operating, and continually improving endpoint, cloud, identity, and compliance controls. The specialist will manage Trend Micro Apex One and Cloud One, CrowdStrike Falcon, Microsoft Entra ID, and Microsoft Defender for Cloud across enterprise IT, cloud workloads, OSS/BSS platforms, digital channels, and supporting infrastructure. The role requires strong operational ownership, 24x7 service awareness, incident response capability, regulatory alignment, and close coordination with Client and delivery teams.

Qualifications & Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
• 5-8 years of cybersecurity engineering or operations experience, with hands-on exposure to endpoint, cloud, identity, or SOC services in telecom, managed services, or another large-scale environment.
• Experience supporting enterprise-scale hybrid or multi-cloud environments, preferably including telecom OSS/BSS, network-supporting platforms, digital channels, or high-availability customer services, within ITIL-aligned incident, change, and problem processes.
• Ability to convert security findings into prioritized remediation actions and communicate technical risk clearly to technical and management stakeholders.

Key Responsibilities

• Administer and optimize Trend Micro Apex One, Trend Micro Cloud One, and CrowdStrike Falcon across user endpoints, servers, virtual machines, and cloud workloads supporting telecom operations.
• Configure security policies, agent deployments, exclusions, upgrades, health monitoring, and endpoint coverage; identify unmanaged, unhealthy, or non-compliant assets and drive remediation.
• Monitor and investigate malware, ransomware, behavioral, EDR/XDR, vulnerability, and suspicious endpoint alerts; contain threats and coordinate recovery across SOC, data center, cloud, network, OSS/BSS, digital, and application-support teams.
• Manage Microsoft Entra ID security controls, including role-based access, privileged access, conditional access, MFA, identity risk, service principals, access reviews, and least-privilege governance.
• Operate Microsoft Defender for Cloud across Azure and connected environments hosting telecom and enterprise workloads; review security posture, alerts, recommendations, regulatory compliance, and workload-protection controls.
• Implement and monitor hardening standards, security baselines, configuration compliance, vulnerability remediation, and exceptions across endpoints, identities, subscriptions, cloud workloads, and systems supporting customer-facing telecom services.
• Support 24x7 security incident response for events affecting telecom service availability, customer-facing systems, OSS/BSS applications, digital platforms, or corporate IT; perform root-cause analysis, threat hunting, evidence collection, containment, recovery coordination, and corrective-action tracking.