Senior Cyber Security Engineer

1 Security Architecture & Engineering

• Design, plan, and continuously improve the security architecture of networks, servers, cloud environments, and applications in line with international standards such as ISO 27001 and the NIST Cybersecurity Framework.

• Install, configure, and manage security tools and infrastructure, including firewalls, IPS/IDS, WAF, EDR/XDR, SIEM, DLP, and proxy solutions.

• Evaluate and select new security technologies and solutions to strengthen the organization's defenses against evolving threats.

• Define security architecture for cloud environments (IaaS, PaaS, SaaS).

2 Security Analysis

• Analyze security events and anomalies through SIEM/SOC platforms on a 24x7 basis.

• Lead the response to and management of security incidents, from containment through recovery, and produce post-incident reports (RCA / lessons learned).

• Develop and maintain the Incident Response Plan, playbooks, and runbooks for various incident types.

• Coordinate with digital forensics teams and external parties in the event of major security incidents.

3 Vulnerability & Risk Management

• Conduct and/or oversee regular vulnerability assessments and penetration testing.

• Analyze assessment results, prioritize risks, and coordinate remediation with relevant teams within agreed timeframes.

• Continuously monitor threat intelligence sources and assess their impact on the organization.

4 Policy, Governance & Compliance

• Develop, review, and update cyber security policies, standards, and procedures.

• Support and prepare the organization for audits against standards such as ISO 27001, PCI-DSS, and data protection regulations (e.g., PDPA).

• Prepare and present security posture reports and KPIs to management and regulators on a regular basis.

5 Team Leadership & Development

• Mentor, supervise, and transfer knowledge to junior/mid-level team members, including assigning work and reviewing quality.

• Act as project lead for assigned cyber security initiatives, from planning through delivery.

• Organize and deliver security awareness training programs for employees across the organization.

6 Other Duties

• Liaise with external vendors and managed security service providers (MSSPs) on procurement and maintenance of security systems.

• Perform other duties as assigned by management.