IT Security (Security Operation)

About the Company

Responsibilities

• ● Monitor and analyze alerts from EDR/XDR, Email Security Gateway, PAM, and NDR, and handle escalations from the 24x7 Managed SOC service provider
• ● Perform incident response end to end: triage, containment, root cause analysis, and incident reporting
• ● Administer and tune security platforms - Trend Micro EDR/XDR, Email Security Gateway, PAM, and NDR - to maintain effectiveness and reduce false positives
• ● Ensure complete onboarding and health of agents, sensors, and log sources, and track SOC provider SLA and service quality
• ● Manage and review privileged access, perform periodic access recertification, and review privileged session logs
• ● Track emerging threats and threat intelligence, and translate them into preventive controls and detection rules
• ● Produce security KPI reports and operational documentation, and support ISO 27001 / PDPA audits

Requirements

• ● Bachelor's degree in Computer Science, IT, Information Systems, or a related field
• ● Minimum 3 years of experience in IT Security or SOC operations
• ● Hands-on experience with at least two of: EDR/XDR, Email Security, PAM, NDR, or SIEM/SOC platforms
• ● Solid understanding of incident response, log analysis, and malware behavior
• ● Working knowledge of Windows/Linux, Active Directory, and networking fundamentals (TCP/IP, DNS, firewall, VPN)
• ● Good communication skills in Thai and English, detail-oriented, and able to work with internal teams and vendors
• ● Willing to support incidents outside normal business hours
• ● Certifications such as CompTIA Security+, CySA+, CEH, GCIH, or relevant product certifications
• ● Scripting and automation skills (PowerShell, Python, Bash)
• ● Experience working with a Managed SOC / MDR service provider
• ● Familiarity with MITRE ATT&CK, CIS Controls, or NIST CSF