Associate Security Engineer (Cloud & AI Operations)

Why we need you

Omise Pro is seeking an Associate Security Engineer to support secure cloud operations and AI-enabled security workflows. This role is ideal for an early-career engineer who is comfortable working with AWS, operational security tooling, logs, automation, and modern AI-assisted investigation processes. You will help keep cloud services secure, support incident investigation, improve security visibility, and contribute to practical security automation across Omise Pro and client environments.

What you will be doing

• Monitor and triage security alerts from AWS, WAF, SIEM, GitHub, endpoint, and cloud security tools.
• Support daily cloud-security operations across AWS workloads, including IAM, CloudTrail, Security Hub, GuardDuty, Inspector, S3, EKS, and EC2.
• Practical understanding of Amazon Web Services (AWS) fundamentals, including IAM, VPC networking, Cloud Logging, Compute Engine, Cloud Storage, and security monitoring.
• Investigate suspicious activity, validate alerts, collect evidence, and escalate confirmed risks using documented processes.
• Help maintain security dashboards, weekly reports, vulnerability tracking, and remediation follow-up.
• Assist with secure configuration reviews for cloud services, APIs, CI/CD pipelines, containers, and access controls.
• Support Cloudflare WAF, DNS, bot-management, and security-event analysis activities.
• Use approved AI tools and automation to summarize logs, prioritize findings, enrich investigations, and improve operational efficiency.
• Help test and improve AI-assisted security workflows while ensuring data handling, access control, and output quality meet security requirements.
• Create clear technical documentation, runbooks, evidence records, and incident notes.
• Work closely with Cloud, DevOps, Engineering, Compliance, and client-facing teams.

You

• 1–2 years of experience in cybersecurity, cloud operations, system administration, DevSecOps, or a related technical role.
• Practical understanding of AWS fundamentals, including IAM, networking, logging, EC2, S3, and security monitoring.
• Basic understanding of common security concepts: authentication, authorization, least privilege, vulnerabilities, logging, incident response, and secure configuration.
• Familiarity with Linux command line, networking fundamentals, and HTTP/HTTPS.
• Interest in security automation, scripting, and AI-assisted operations.
• Ability to read logs, investigate issues methodically, and communicate findings clearly.
• Good written and spoken ability in Thai and English.
• A responsible mindset: comfortable asking questions, escalating early, and following operational procedures.

Nice to Have

• Exposure to AWS Security Hub, GuardDuty, Inspector, Cloudflare, SIEM, EDR, GitHub security, Docker, Kubernetes, or Terraform.
• Basic Python, Bash, JavaScript, or API experience.
• AWS Cloud Practitioner, AWS Certified Security – Specialty, Security+, or similar certification.
• Experience from fintech, payments, SaaS, cloud, or regulated environments.
• Familiarity with generative AI, LLMs, prompt design, RAG, or agentic workflows.

Why you’ll love it here

• Work with other talented, ambitious international colleagues who love their craft
• A modern and well-equipped work environment
• Flexible working hours
• A medical healthcare plan and annual health check-up
• A friendly bunch of colleagues