Security Engineer - Operations

About the Role

You will balance exceptional delivery for customers on what matters, engaging teams and colleagues, with the needs of the business. You are an expert and often the first layer of management of people or projects.

Responsibilities

• Contribute security guidance and operation best practice to colleagues and partners.
• Ensure security control and compliance are applied to all company environments.
• Operate and monitor security tools (e.g., Antivirus, VA scan, WAF, PAM, DNS, Certificate, Firewall, Proxy).
• Manage and support security requests and security incidents through ITSM.
• Perform problem analysis and root cause analysis.
• Manage system inventory and change management for security operation related items.
• Identify security gaps in existing and proposed architectures and recommend changes or enhancements.
• Collaborate with IT teams for external and internal audit assessments to ensure controls meet regulatory and legal requirements.
• Other security operation related tasks as assigned.

Qualifications

• Bachelor's or associate degree in IT, Computer Science, or related field.
• At least 2 years of experience in security design, operation or implementation.
• IT security certifications may be advantageous.
• Strong working knowledge of current IT risks, security implementations, and computer operating and software programs.
• Ability to interact with a wide range of people from different backgrounds and races.
• Excellent problem-solving, communication, and interpersonal skills.

Skills

• Expertise in security measures such as firewalls, intrusion detection and prevention systems (IDS/IPS), network access controls, and network segmentation.
• Experience with operating systems: Windows, Linux, and UNIX.
• Strong ability to analyze user requirements, make recommendations and implement solutions.
• Ability to prioritize and execute in high-pressure environments.
• Understanding of information security principles and best practices (e.g., ISO27001, PCIDSS, OWASP and GDPR/PDPA).
• Ability to present security topics to a non-technical audience and present the business value of security.
• Good interpersonal skills with the ability to build and influence teams; self-motivated.
• Third-party auditing skills and risk assessment methodologies.

Benefits

• Health Insurance: Group insurance including OPD, IPD, Emergency OPD.
• Provident Fund: 3% provident fund.
• Year-end bonus: Variable and performance bonus.
• Annual leave: Attractive vacation days (minimum 16 days).
• No overtime: 5 days a week work schedule.
• Free car parking space for employees.

Additional Information

• Best Culture: Clear focus.
• Diverse Workplace (members from around the world).
• Non-hierarchical and agile environment.
• Growth opportunity and career path.