IT Security Engineer (Senior STEM Infrastructure Service) - 1 Position(s)
Posted Updated
Description
Location:Bangkok
Department:Information Technology
Reports To: Assistant Department Head – Infrastructure Services
Employment Type:Full time - Hybrid
Key Responsibilities- Monitor, analyze, and respond to cybersecurity incidents.
- Use and manage security tools such as SIEM, EDR/XDR, IDS/IPS, and security logs.
- Assess and track vulnerabilities in network devices, systems, and applications.
- Work with relevant teams to plan and carry out patch management and updates.
- Conduct vulnerability scans and penetration testing (Vulnerability Assessment & Penetration Testing).
- Support the development and implementation of security policies, standards, and governance, risk, and compliance (GRC) requirements.
- Install, maintain, update, and troubleshoot Linux and Windows Server systems, covering both hardware and software.
- Conduct training and build organization-wide security awareness.
- Manage user permissions, Group Policy, and access control.
- Perform system hardening and oversee related security software and services within the organization.
- Track emerging trends in AI-related cybersecurity threats (e.g. AI-enabled cybercrime, deepfakes, generative AI) and apply AI capabilities to threat detection, analysis, and other IT security functions such as automation for incident response.
- Bachelor's degree or higher in Computer Engineering, Computer Science, Information Technology, Management Information Systems, or a related field.
- 2–4 years of relevant experience, including at least 2 years in IT Security and at least 2 years administering and troubleshooting Linux and Windows Server systems.
- Skilled in applying AI to manage, detect, analyze, and enhance internal IT security systems (e.g. AI threat detection, automation for incident response).
- Knowledge of enterprise networking and security tools (e.g. Cisco/Arista, Palo Alto/Fortigate firewalls).
- Understanding of security frameworks and standards such as ISO 27001, NIST CSF, and CIS Controls.
- Good command of English.
- Strong interpersonal skills, a good team player, and eager to keep learning new things.
