Filter Jobs

Experience:

3 years required

Skills:

System Security, Windows Server

Job type:

Full-time

• Provide input and security consultation in a project-based environment as well as assisting operational of IT Security components with functional security requirements.
• Evaluate new projects and applications as they relate to security architecture and design; audit existing deployments and analyse gaps against security practices and standards.
• Conduct application vulnerability assessment, secure code review, and security penetration testing for new projects, enhancement projects, and periodic assurance to com ...
• Implement and operate DevSecOps on projects/applications that use DevOps process.
• Track, enforce, and consult to resolution the closure of security risks including review plans and monitor progress or remedial actions according to security requirements, security design, application vulnerability, and penetration testing issues.
• Periodically review security requirements to align with Bank s policies and regulations.
• Support periodic security audits.
• Manage third parties involved in IT Security Advisory and Assurance.
• Bachelor's or Master s Degree in Computer Science, Engineering, Information Systems or equivalent.
• Minimum 3 years in IT Security Advisory, Security Assurance, Threat Hunting plus experience working in or closely with IT Application, Enterprise Architect, and IT Risk management.
• Knowledge of Security Framework and Concepts, Compliance, Risk and Regulations, PCI DSS, OWASP, COBIT.
• Experience in performing comprehensive and authoritative technical analysis of the security readiness and compliance of applications.
• The ability to oversee pentesting to find vulnerabilities in all elements of a security system, understand security vulnerabilities, secure code review and remediation.
• Data and information management, including classification, retention and destruction. It also means keeping corporate and personal data both private and secure while needed, and destroyed when it is no longer needed.
• Knowledge of all applicable laws and compliance frameworks to enforce compliance.
• Remark: The Bank requires the verification of criminal records prior consideration for employment to ensure secured and maintain standards of the organization.

Experience:

7 years required

Skills:

System Security, Windows Server, Linux

Job type:

Full-time

• Identify and evaluate areas for improvement in detection, prevention, and cyber incident response.
• Work closely with stakeholders to develop and follow up on remediation plans.
• Provide expert consultation on mitigating strategies and actionable remediation plans to asset owners.
• Collaborate with various teams to create, implement, and monitor effective remediation strategies.
• Apply knowledge of IT infrastructure, with experience as a system administrator or system engineer, to enhance cybersecurity measures.
• Utilize an understanding of offensive and defensive cybersecurity strategies (e.g., red and blue teams).
• Perform penetration testing or demonstrate a strong understanding of penetration testing methodologies to assess the security of IT systems.
• Use computer forensic tools to examine and analyze electronic media in suspected hacking cases.
• Conduct tasks related to malware analysis and reverse engineering to identify and mitigate threats.
• Define a course of action if a security problem exists and explain in detailed technical reports what occurred when an incident happens, including the reasons it occurred, and the response taken.
• Document incidents thoroughly, providing detailed technical reports that include the cause of the incident, and the response measures implemented.
• Build relationships with other entities responsible for conducting cyber threat analyses, ensuring effective collaboration and information sharing.
• Bachelor s degree / master s degree or higher in Computer Engineering, Information Technology, Computer science or related field.
• Proficiency with SIEM, UBA, and SOAR tools.
• Experience with system monitoring tools.
• Coding ability in C, C++, C#, Java, ASM, PERL, PHP, and PowerShell.
• Knowledge of backup and archiving techniques.
• Use of enterprise system monitoring tools.
• Understanding of cloud computing.
• Proficiency in UNIX.
• Knowledge of network communication (IP/TCP).
• Familiarity with computer hardware systems.
• Experience with web-based application security.
• Strong knowledge of Windows and Linux Operating Systems.
• Experience in identifying and evaluating cybersecurity risks and providing actionable insights.
• Previous experience as a penetration tester (pentester) is highly beneficial.
• Experience as a system administrator/system engineer is advantageous.
• Familiarity with computer forensic tools and techniques.
• Experience in malware analysis and reverse engineering.
• Ability to work well under pressure while handling multiple tasks.
• Remark: The Bank requires the verification of criminal records prior consideration for employment to ensure secured and maintain standards of the organization.

Skills:

Corporate Law, Risk Management, English

Job type:

Full-time

• Responsible for security management in Suksawas Sortation Center, ensuring the safety of company assets and personnel.
• Develop and implement comprehensive security policies and procedures in compliance with laws and regulations and Alibaba International's security standards.
• Monitor and assess potential security risks, establish preventive measures, and minimize the occurrence of security incidents.
• Coordinate and lead the security team, conducting regular training to build skills and competence of security manpower.
• Maintain a good relationship with local law enforcement agencies to handle potential security incidents and ensure compliance.
• Execute security protocol to manage and enforce the compliance of parties involved including staff, IC, subcon or etc.
• Managing facility and infra structure support in build up cctv coverage in place insuring it been manage function as intended.
• Bachelor's degree or above in Security Management, Law, or related fields.
• More than ten years of experience in security management, with a preference for experience in Thailand or similar regions.
• Familiarity with Thai security regulations and International's security management system with strong risk assessment capabilities.
• Qualified TAPA FSR (if applicable) would be advantage.
• Excellent leadership and team collaboration skills, capable of guiding and motivating team members effectively.
• Fluent in Thai and English, with strong communication and coordination abilities to work effectively with multiple departments.

Skills:

Network Infrastructure, Project Management, VMware, English

Job type:

Full-time

• Design/Implement Cyber Security project for Private Cloud and Global Cloud (CloudX, AWS and MS Azure).
• Solution integration and migration.
• Control suppliers in the assigned project.
• Do project quality control.
• Do project risk assessment and management.
• Do project UAT with customer.
• Create final project document.
• Do customer project training (OJT).
• At least 4 years of Cyber Security experience.
• Bachelor s degree in Computer Engineering, Information Technology, Computer Science or related fields.
• Experience in installation and operation Security product e.g. Firewall, IPS, SIEM, NAC, Anti-Virus, Endpoint.
• Knowledge on network security and cloud technology.
• Knowledge of monitoring tools (What s up gold, Zabbix, Nagios).
• Has valid Security product Certification e.g. Foritnet NSE3-7, PaloAlto PCNSA, PCNSE, Cisco CCNA, CCNP Security.
• Experienced in ITIL framework.
• Senior Engineer/Engineering Specialist (Network and Security).
• Configure and install various network devices and services (e.g., routers, switches, firewalls, load balancers, VPN, QoS).
• Managing and troubleshooting SD-WAN solutions, Wireless Lan and Cybersec solution.
• Perform network maintenance and system upgrades including service packs, patches, hot fixes, and security configurations.
• Monitor performance and ensure system availability and reliability.
• Monitor system resource utilization, trending, and capacity planning.
• Provide Level-2/3 support and troubleshooting to resolve issues.
• Work within established configuration and change management policies to ensure awareness, approval and success of changes made to the network infrastructure.
• Select and implement security tools, policies, and procedures in conjunction with the company s security team.
• Work with vendors and other IT personnel for problem resolution.
• Bachelor s degree in computer engineering, computer science, IT, or related fields.
• At least 3-5 years of experience in network & security areas.
• Knowledge and Experience with network design, implementation, service support, and troubleshooting.
• Knowledge and Experience with SD-WAN, Network Security and CyberSec solutions.
• Knowledge and Experience in LAN/Datacenter networking, TCP/IP, DNS, DHCP, SSL, HTTP, Proxy, Web Application Firewall.
• CCNA, CCNP, CompTIA Network+, Fortigate, PaloAlto product certificate is advantage.
• Good communication, analytical thinking, and effective communication skills with interpersonal and problem-solving skill.
• Able to work outside working hours.
• Good command of read, listen, written and speaking English.
• On-call support during non-office hours.
• Engineering Specialist (Project Engineer).
• Manage CCII (Cloud, Cyber Security, IOT, ICT) project for single and multi-tower solution for Property, Retail, Conglomerate, and international customer segments.
• Be a committee of AIS bid management for validating large projects at TCV > 10MB.
• Manage project stakeholders to meet expectation and requirement.
• Communicate project progress to stakeholders.
• Plan and manage project issue and risk with proper actions.
• Plan and manage project to meet project objective, within timeline, project budget, scope and give customer satisfied.
• Manage project resource both internal delivery and external suppliers.
• Bachelor's degree or higher in computer science, business, or a related field.
• 8-15 years of project management and related experience.
• Strong in communication and stakeholder management.
• Project Management Professional certification preferred.
• Proven ability to solve problems creatively.
• Strong familiarity with project management software tools, methodologies, and best practices.
• Experience seeing projects through the full life cycle.
• Excellent analytical skills.
• Strong interpersonal skills and extremely resourceful.
• Proven ability to complete projects according to outlined scope, budget, and timeline.
• Senior Engineer (System Infrastructure)
• Implement Server, Storage, Virtualization, Backup system for Enterprise customer.
• Hypervisor and Operating system configuration and customization.
• Network and firewall integration for Cloud infrastructure.
• Hand-over completed solution to related team.
• At least 3 years experience on Server, Storage, VMware and Veeam delivery.
• Strong knowledge of Cloud environment and Operating system. (Windows and Linux).
• Basic skill of Database and Middleware installation.
• Strong organizational skills and ability to take on multiple assignments.
• Experienced firewall and cloud network implementation.
• Ability to occasionally work or assign work during nights/weekends during critical incidents per on-call rotation or major project implementations.
• Good command of English.
• VMware VCP or Linux certificate knowledge is an advantage.

Skills:

Research, Automation

Job type:

Full-time

• Lead the Cyber Security Incident Response (CSIR) team in day-to-day operations, managing complex incidents, and communicating progress to senior management.
• Ensure clear incident documentation and oversee the implementation and follow-up of realistic remediation plans.
• Detect and independently respond to security incidents across the organization.
• Assume the role of an Incident Manager during major security events.
• Collaborate with management to execute and iterate on the incident response process.
• Develop the threat-response matrix, incident-response playbook, and processes. Design and implement metrics for incident response, continually improving efficiency and effectiveness.
• Stay informed of emerging threats, security technologies, and relevant research for continuous improvement.
• Identify and mitigate complex security threats before exploitation.
• Implement and monitor security measures for infrastructure protection.
• Utilize log analysis platforms for security analytics and threat detection.
• Perform root cause analysis (RCA) and incident reviews.
• Mentor other members of the Security Incident Response Team.
• Help the team grow their skills and experience.
• Provide security recommendations to security architecture, issues, and features.
• Create a supportive environment for team members.
• Build strong partnerships with the other departments as a supporter of the cyber security incident response team. (CSIRT).
• Train team members to prioritize efforts and ensure alignment with company direction.
• Be a role model for positive thinking, and conflict resolution.
• Draft and successfully deliver on quarterly OKRs (Objectives and Key Results).
• Bachelor's degree or higher in Computer Engineering, Computer Science, IT, or related fields.
• A minimum of 5 years of working experience in Security Operations (SecOps), incident response, threat analysis, incident management, or relevant investigations during medium and large-scale security events.
• Robust understanding of security issues, mitigations, and a solid grasp of the current global threat landscape.
• Experience in security solutions, secure network design, firewalls, authentication, authorization systems, log analysis platforms, security incident response, monitoring, and intrusion detection.
• Profound knowledge of attacks, mitigation methods, and threat modeling.
• Experience in digital forensics, SOAR automation, and cloud providers like GCP, AWS, and Azure is advantageous.
• Strong written and verbal communication skills are required, including conducting presentations and creating security reports. Experience with executive-level communications is a plus.
• Substantial engineering mindset.
• Capability to build working relationships with key stakeholders.
• Capability to make concrete progress in the face of ambiguity and imperfect knowledge.
• Hold the certificate of CompTIA Security +, CompTIA CySA+, and others would be an added advantage.

Experience:

3 years required

Skills:

Compliance, Legal, Risk Management

Job type:

Full-time

• Develop data security policy review, data security policy exceptions, and control risk mitigation processes.
• Define the security controls for access management lifecycle (i.e., requirement for creation, deletion, transfer and review).
• Operate:Advice on technology relating to Data Privacy and Protection (i.e., PDPA) related security controls implementation.
• Drive and support data security controls such as Data Loss Prevention (DLP), Data Masking, Data Encryption capabilities to protect sensitive data.
• Drive compliance (or collaborate with compliance team) to organization security policies, standards, metrics, and legal requirements.
• Communicate and enforce security policies, rules, and standards.
• Conduct impact assessment of data initiatives from a security point of view.
• Ensure the cryptographic keys and related components are safety and protection of confidential information.
• Resolve data security audit and risk findings.
• Review and develop security controls to current access controls policies and procedures.
• Provide requirements for create and manage roles, access rights (includes privileged access), authentication and identity within the environment.
• Conduct periodic review of user access.
• Review, approve and monitor the usage of privileged access.
• EDUCATION.
• Bachelor s degree in computer science, Information Systems, or equivalent education or work experience.
• EXPERIENCE.
• Work experience in privacy, compliance, information security, auditing or a related field may also be an accepted alternative, according to Cybersecurity.
• Minimum 3 years of experience in and strong knowledge of privacy, data, operational risk management, information security, or related areas in IT.
• OTHER REQUIREMENTS.

Experience:

1 year required

Skills:

Risk Management, Compliance, English

Job type:

Full-time

• Invite and provide evidence-based feedback in a timely and constructive manner.
• Share and collaborate effectively with others.
• Work with existing processes/systems whilst making constructive suggestions for improvements.
• Validate data and analysis for accuracy and relevance.
• Follow risk management and compliance procedures.
• Keep up-to-date with technical developments for business area.
• Communicate confidently in a clear, concise and articulate manner - verbally and in written form.
• Seek opportunities to learn about other cultures and other parts of the business across the Network of PwC firms.
• Uphold the firm's code of ethics and business conduct.
• Preferred skills.
• Penetration Tester (Manual & Automate).
• Minimum years experience required.
• Over 1 years of Experience in related fields.
• Additional application instructions.
• Good Communication in English.
• Education (if blank, degree and/or field of study not specified).
• Degrees/Field of Study required: Degrees/Field of Study preferred:Certifications (if blank, certifications not specified).
• Required Skills.
• Optional Skills.
• Desired Languages (If blank, desired languages not specified).
• Travel Requirements.
• Not Specified
• Available for Work Visa Sponsorship?.
• Yes
• Government Clearance Required?.
• No
• Job Posting End Date.
• April 30, 2025

Skills:

Data Analysis, Computer Security

Job type:

Full-time

• Participate in the preparation of audit guidelines (Audit Program), responsible audit units, and determine audit procedures to ensure that the audit achieves its objectives.
• Collect, analyze, and evaluate information obtained from inspections. to the adequacy and efficiency of the internal control system.
• Be a main contactor for examining IT systems, applications, and vulnerabilities in security measures.
• Identify issues and devise practical solutions.
• Ensure the organization's IT practices adhere to industry regulations and internal policies.
• Bachelor s or higher degree in Information Technology, Business Information Systems, Computer Engineering, Computer Science or any related field.
• Understanding of IT governance frameworks.
• Passed training in IT Governance or IT Best Practice or information auditing standards.
• Certificate of qualification in IT Audit or Security.
• Technical skill: Data analysis and interpretation / IT audit procedures and methodologies.
• Location: Lao Peng Nguan Tower 1 Vibhavadi Rangsit Road, Chatuchak.
• Working Days: Mon-Fri.
• Times: 8.30 a.m. - 05.00 p.m..

Experience:

1 year required

Skills:

Risk Management, Compliance

Job type:

Full-time

• Invite and provide evidence-based feedback in a timely and constructive manner.
• Share and collaborate effectively with others.
• Work with existing processes/systems whilst making constructive suggestions for improvements.
• Validate data and analysis for accuracy and relevance.
• Follow risk management and compliance procedures.
• Keep up-to-date with technical developments for business area.
• Communicate confidently in a clear, concise and articulate manner - verbally and in written form.
• Seek opportunities to learn about other cultures and other parts of the business across the Network of PwC firms.
• Uphold the firm's code of ethics and business conduct.
• referred skills.
• Cyber Security and Data Privacy.
• Minimum years experience required.
• 1-3 years of Experiences.
• Additional application instructions.
• N/A.
• Education (if blank, degree and/or field of study not specified).
• Degrees/Field of Study required: Degrees/Field of Study preferred:Certifications (if blank, certifications not specified).
• Required Skills.
• Optional Skills.
• Desired Languages (If blank, desired languages not specified).
• Travel Requirements.
• Not Specified
• Available for Work Visa Sponsorship?.
• Yes
• Government Clearance Required?.
• No

Experience:

2 years required

Skills:

Network Infrastructure, Security Design, Big Data, English

Job type:

Full-time

• Perform cyber security and IT security assessments for clients (e.g. cyber security program assessment, cyber security risk assessments, IT network infrastructure reviews, system technical configurations review, information security policies and processes/procedures review etc.).
• Work on IT security design, analysis and implementation of security protection solution.
• Evaluate and analyze threat, vulnerability, system weakness, impact and risk to secu ...
• Advise clients on the security issues, including explanation on the technical details and how they can remediate the vulnerabilities in the processes, controls and systems.
• Advise client on the security incident response end-to-end process (i.e. preparation, detection, analysis, response and recovery of the security incident).
• Skills and attributes for success.
• To qualify for the role you must have.
• Bachelor's degree or Master s degree in Computer Engineering, Computer Science, Information Systems, IT Security, ICT or other related fields.
• Minimum 2 years' experience in such areas as IT security management design and implementation, IT security assessment and IT technical background.
• Familiar with leading IT security processes and tools.
• Highly proficient in both English and Thai with good written and oral communication and analytical skills.
• Ideally, you ll also have.
• Having experience in project planning and management will be a plus.
• Professional certifications such as Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), and / or Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or ISO27001 will be highly considered.
• Experience in new generation security practices (i.e. DevSecOps, iPentest, RedTeaming, System Resilience Design).
• Experience in Emerging Technologies (i.e. Cloud Computering, Blockchain, Big Data, A.I./M.L.).
• We re interested in intellectually curious people with a genuine passion for cyber security. With your specialization in attack and penetration testing, we ll turn to you to speak up with innovative new ideas that could make a lasting difference not only to us - but also to the industry as a whole. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here, this is the role for you.
• What we offer.
• We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions.
• Continuous learning: You ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You ll be embraced for who you are and empowered to use your voice to help others find theirs.
• If you can demonstrate that you meet the criteria above, please contact us as soon as possible.
• The exceptional EY experience. It s yours to build.
• EY | Building a better working world.
• EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
• Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
• Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Experience:

3 years required

Skills:

Research, System Administration, Android

Job type:

Full-time

• Implements IT security improvements by assessing current situation; evaluating trends; anticipating requirements.
• Protects IT system by defining access privileges, control structures, and required resources.
• Process & analyze to gain insights on past IT areas on, current or potential attacks and threats that pose a risk to the organization.
• Primary point of contact with Internal Audit. Periodically review, update, implement and communicate changes to IT policies and procedures and General IT Controls. Facilitate internal and external audit processes by participating in scoping discussions and walk-throughs, delivering evidence that controls are operating as defined, remediating deficiencies, and acting on recommendations.
• Safeguards IT infrastructure and system as well as information system assets by identifying and solving potential and actual security problems.
• Research cyber security topics and promote Cyber security awareness throughout Thaioil.
• EDUCATION.
• Bachelor s degree in computer science, Information Systems, or equivalent education or work experience.
• EXPERIENCE.
• 3+ years of prior relevant experience, especially in IT working environment.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.
• Hands-on experience analyzing high volumes of logs, network data (e.g., Netflow, FPC), and other attack artifacts in support of incident investigations.
• Experience with vulnerability scanning solutions.
• Familiarity with Vulnerability Management program.
• Proficiency with any of the following: Anti-Virus, HIPS, ID/PS, Full Packet Capture, Host-Based Forensics, Network Forensics, and RSA Security.
• Have knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform.
• Understanding of mobile technology and OS (i.e., Android, iOS, Windows), VMware technology, and Unix and basic Unix commands.
• OTHER REQUIREMENTS.

Experience:

8 years required

Skills:

Business Development, Assurance, Software Development, English

Job type:

Full-time

• Design and work on cybersecurity framework based on business objectives and strategic imperatives of the client organisation including goals, vision, mission, and operational plans.
• Data pattern and trend identification via metric analysis, driving operational excellence and improvement.
• Designing and implementing data protection and privacy programs for our clients and supporting their business.
• Evaluating the data protection and privacy practices of our clients and Conducting Privacy Impact Assessments.
• Monitor processes and drive improvements in efficiency and quality of cybersecurity programs.
• Assist in development of workflows for transitioning strategic plans into implementation plans and operational readiness.
• Facilitate strategic planning initiatives, documentation, technical roadmaps and security tool rationalisation.
• Assist in designing the security organisation structure including cyber defense.
• Develop security policies, procedures, standards based on the security strategy and roadmap.
• Review of cybersecurity policies and processes to identify gaps in design of control based on comprehensive assessment framework.
• Maintain continuous communication with key stakeholders in support of the security strategy, and plan and solicit feedbacks, to uplift the programs and capabilities.
• Conduct security process implementation reviews to assess security effectiveness and reporting.
• Conduct Current State Assessment of cybersecurity practices against the defined controls and provide recommendations for to-be state.
• Run Cyber Security Diagnostic Assessments and develop programs for cybersecurity skill development and enhancement.
• Provide certification advisory across Information Security Management System (ISMS).
• Implement security controls for realisation of the certification requirements and provide technology roadmap based on the security strategy.
• Assisting in delivering privacy projects to acting as a subject matter expert on them or to leading a team towards excellent client experience.
• Supporting and guiding our clients in adhering to the complex web of relevant national and international regulations (e.g. EU General Data Protection Regulation).
• Deploying processes and tools to help detect and prevent privacy breaches.
• Ensuring a harmonised approach towards data protection and privacy by bringing together our client s stakeholders (e.g. legal, compliance, risk, HR, security, business functions).
• Assisting clients in privacy related incident response activities.
• Supporting the client s team by acting as an interim team member (e.g. data protection officer, security officer, security manager, security analyst).
• Proactively identifying and pursuing opportunities for further business and team growth.
• Preferred skills.
• Bachelor s degree in Computer Science, Information Systems, Information Technology, Engineering, or equivalent education.
• Minimum 4 - 5 years of prior relevant working experience.
• Experience with vulnerability scanning solutions and cybersecurity systems.
• Possession of relevant qualifications such as CIPM, CIPT, CIPP/E, CISM, CISSP, and/or HCISSP, as well as involvement in industry related organizations (e.g. IAPP, ISACA, (ISC)² ) or relevant certifications.
• Strong interpersonal and stakeholder management skills with ability to coordinate between technical and business teams.
• Excellent verbal, written communication and interpersonal skills with stakeholders at all levels.
• Knowledge and experience with relevant data protection and privacy laws and regulations (e.g. PDPA, EU GDPR, and Privacy Shield) and industry standards and frameworks, such as GAPP and BCR.
• Ability to efficiently understand client organisations and their business model and to tailor relevant processes to privacy requirements.
• An analytical mindset, strive for quality and are able to work in a result-oriented environment.
• Education (if blank, degree and/or field of study not specified).
• Degrees/Field of Study required: Bachelor Degree Degrees/Field of Study preferred:Certifications (if blank, certifications not specified).
• Required Skills.
• Optional Skills.
• Desired Languages (If blank, desired languages not specified).
• Travel Requirements.
• Not Specified
• Available for Work Visa Sponsorship?.
• Yes
• Government Clearance Required?.
• No
• Job Posting End Date.
• December 31, 2024

Experience:

5 years required

Skills:

Problem Solving, English

Job type:

Full-time

• Design, implement and maintain the IT Security of the organization which involves developing and executing security strategies, standards and procedures to protect IT assets from cyber threats and vulnerabilities.
• Develops solution conceptual designs and solution blueprints for IT projects.
• Design security architecture elements to mitigate emerging threats.
• Reviewing security measures and recommending to implementing enhancements.
• Review and advise security solution architect for the proposed system such as: Network Segmentation, Application protection, Defense-in-depth, Remote Access, Encryption Technologies.
• Conducting security advisory consultancy and working with RED and BLUE team for security testing along the pipeline of the system delivery.
• Bachelors or Masters Degree in Computer Engineering, Computer Science or related field.
• At least 5 years of experience of IT Security Advisory, Penetration tester or Enterprise Architect or related role.
• Comprehensive understanding of the IT Security Concept, Security Architect, Risk assessment.
• Ability to analyst finding form Offensive and Defensive Security team.
• Ability to analyze end-to-end security processes and provide advice in order to reduce risk to acceptable levels.
• Strong analytical and problem solving.
• Rapid learning capability and able to work under pressure.
• Good command in written and spoken Thai and English language.
• Ability to present technical solutions with stakeholders in an easy way.
• Knowledge of International Security frameworks, Standards, and Guidelines e.g., NIST-800-53, PCI-DSS, OWASP, and etc.
• Professional Certificated related to work e.g. (CISSP, CSSLP, CDPSE, OSCP, TOGAF) is desirable.
• Location: True Digital Park, Punnawithi.

Experience:

5 years required

Skills:

Risk Management, Project Management, English

Job type:

Full-time

• Oversee the planning, execution, and monitoring of security-related projects.
• Coordinate with cross-functional teams to ensure successful project delivery.
• Develop project plans, schedules, and budgets, and track progress against established objectives.
• Communicate project status, risks, and issues to relevant stakeholders.
• Identify, assess, and prioritize security risks across the organization.
• Develop and implement risk mitigation strategies and controls.
• Monitor and report on the effectiveness of risk management activities.
• Collaborate with stakeholders to ensure a consistent approach to risk management across the organization.
• Develop, review, and maintain security policies, standards, and procedures.
• Ensure alignment with regulatory requirements and industry best practices.
• Collaborate with stakeholders to promote the adoption and enforcement of security policies and standards.
• Provide guidance and support to the organization in the interpretation and implementation of security policies and procedures.
• Effectively communicate security issues and concerns to the technology team.
• Collaborate with the technology team to develop and implement solutions to address identified security issues.
• Provide ongoing support and guidance to the technology team regarding security best practices and risk mitigation.
• Foster a strong working relationship between the security governance function and the technology team to promote a culture of security awareness and collaboration.
• Positive, can-do attitude, who naturally expresses a high degree of empathy to others.
• Bachelor s degree in Information Security, Computer Science, or a related field.
• A minimum of 5 years of experience in information security, with a focus on security governance.
• Professional certifications such as CISSP, CISM, or CRISC are preferred.
• Strong understanding of information security principles, frameworks, and best practices.
• Experience in audit management, risk assessment, and policy development.
• Excellent project management and organizational skills.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and communicate complex security issues in a clear and concise manner.
• Demonstrated ability to work independently and deliver results under tight deadlines.
• Talent to identify and create a broad vision for a security solution and to execute it.
• Systems Thinking - the ability to see how parts interact with the whole (big picture thinking).
• Proven experience of acting as an expert in project teams.
• Ability to explain your thoughts or findings also to non- technical professionals.
• Good command in written and spoken Thai and English language.
• Location: True Digital Park, Punnawithi.

Experience:

No experience required

Skills:

Linux, CompTIA Security+, Network Administration, English

Job type:

Full-time

• Oversee power, cooling, and cabling; install, configure, and maintain servers, storage, and network hardware.
• Ensure 24/7 system availability through proactive monitoring, performing routine health checks on servers, storage systems, and networks.
• Diagnose and resolve server, network, and application performance issues; escalate critical incidents and ensure swift resolution.
• Implement security protocols (firewalls, access controls) and ensure compliance with industry standards and internal policies.
• Manage data backup processes and conduct disaster recovery tests to ensure business continuity.
• Execute hardware and software upgrades for servers, networks, and storage systems, and maintain thorough documentation of configurations and processes.
• Bachelor s degree in IT, Computer Science, or related field.
• Experience in data center operations, Linux, and Microsoft system administration.
• Familiarity with ServiceNow and network administration.
• Certifications like CCNA, CompTIA Network+, or relevant Microsoft certifications (e.g., MCSA) are preferred.
• Flexible to relocation.
• Good command in English (Minimum 750 TOEIC score).
• Goal-Oriented, Unity, Learning, Flexible.

Experience:

7 years required

Skills:

English

Job type:

Full-time

• Encourage everyone to have a voice and invite opinion from all, including quieter members of the team.
• Deal effectively with ambiguous and unstructured problems and situations.
• Initiate open and candid coaching conversations at all levels.
• Move easily between big picture thinking and managing relevant detail.
• Anticipate stakeholder needs, and develop and discuss potential solutions, even before the stakeholder realises they are required.
• Contribute technical knowledge in area of specialism.
• Contribute to an environment where people and technology thrive together to accomplish more than they could apart.
• Navigate the complexities of cross-border and/or diverse teams and engagements.
• Initiate and lead open conversations with teams, clients and stakeholders to build trust.
• Uphold the firm's code of ethics and business conduct.
• Preferred skills.
• Security Operation Center (SOC).
• Minimum years experience required.
• 7 years of experiences and above.
• Additional application instructions.
• Good communication in english.
• Education (if blank, degree and/or field of study not specified).
• Degrees/Field of Study required: Degrees/Field of Study preferred:Certifications (if blank, certifications not specified).
• Required Skills.
• Optional Skills.
• Desired Languages (If blank, desired languages not specified).
• Travel Requirements.
• Not Specified
• Available for Work Visa Sponsorship?.
• Yes
• Government Clearance Required?.
• No
• Job Posting End Date.
• December 31, 2024

Skills:

Linux, Good Communication Skills, English

Job type:

Full-time

• Conduct advanced penetration tests to identify vulnerabilities in computer systems, networks, and applications.
• Perform vulnerability assessments and security audits to evaluate the effectiveness of existing security measures.
• Develop and execute simulated cyber-attacks to assess the organization s readiness to defend against real-world threats.
• Employ various attack methodologies to test the resilience of systems against hacking attempts and security breaches.
• Perform threat modeling to anticipate potential attack vectors.
• Analyze risks associated with identified vulnerabilities and recommend appropriate mitigation strategies.
• Develop custom tools and scripts to automate penetration testing and exploit known vulnerabilities.
• Keep up to date with the latest exploitation techniques and security tools.
• Prepare detailed reports on findings from penetration tests and security assessments.
• Document and present risks and vulnerabilities to relevant stakeholders, along with recommended countermeasures.
• Collaborate with the Blue Team to enhance the organization s defensive strategies based on offensive findings.
• Share insights and knowledge on emerging threats and attack techniques with the cybersecurity team to continually improve defensive measures.
• Bachelors or Masters Degree in Computer Engineering, Computer Science or related field.
• At least 10 years of experience in penetration testing and vulnerability assessments or related roles.
• Strong knowledge of network and application security, ethical hacking, and cybersecurity principles.
• Familiarity with penetration testing tools (e.g., Metasploit, Burp Suite, Kali Linux).
• Excellent problem-solving skills and ability to think like an adversary.
• Good communication skills for effective reporting and stakeholder engagement.
• Rapid learning capability and able to work under pressure.
• Good command in written and spoken Thai and English language.
• Ability to present technical solutions with stakeholders in an easy way.
• Knowledge of International Security frameworks, Standards, and Guidelines e.g., NIST-800-53, PCI-DSS, OWASP, etc.
• Professional Certificated related to work e.g. (CISSP, OSCP, OSWE) is desirable.
• Location: True Digital Park, Punnawithi.

Experience:

5 years required

Skills:

System Security, System Administration, UNIX, English

Job type:

Full-time

• Ensure the operational health of server, storage and workstation infrastructure environment including security, availability, performance, interoperability, and reliability.
• Perform performance tuning, hardware upgrades, and resource optimization.
• Implement and maintain system security configurations, operating system updates and patch management in accordance with industry standards.
• Implement and design future state architectures and roadmaps including architecture standards, guidelines, and industry best practices.
• Participate in technology evaluation and reengineering teams to support strategy-definition and continuous process improvement activities.
• Conduct system and operation performance analysis.
• Create, maintain and improve technical operational work instructions.
• Maintain data center environmental and monitoring equipment.
• Coordinate with vendors to support external and internal technical system issues.
• Professional Knowledge & Experiences.
• Bachelor s Degree in Computer Science, Computer Engineering or related.
• Minimum of 10 years experience of relevant IT experience.
• Minimum of 5 years experience of IT System Engineer.
• Advanced understanding system administration in UNIX, Windows, VMware, Ctrix.
• Experience in HPC technology would be an advantage.
• Experience in Oil and Gas industry would be an advantage.
• Strong analysis, and problem resolution skill.
• Excellent command of Thai/English and ability to effectively communicate at all levels (written and verbal).
• Additional Desirable Qualification.
• CORE Competencies.

Experience:

3 years required

Skills:

Pleasant Personality, Microsoft Office

Job type:

Full-time

• To oversee administrative function.
• Attend to call.
• Assist any clerical or administrative tasks as assigned.
• 2) Office facilities
• To ensure office facilities are always at good working condition includes Photocopier, Door Access Device, Pantry, etc.To always ensure sufficient office supplies at all times includes stationary, office grocery and beverages.
• 3) Office Cleanliness
• To manage tea-lady and ensure office cleanliness is maintainedTo liaise with building facilities management office on overall cleanliness of the compound.
• To attend to office needs and repairs and upkeep of office.
• 4) Office Security & Safety
• Oversea the security and safety measures in the officeTo undertake responsibility as Floor Warden and act according to requirement of building security measures.
• Project Tasks
• Printing and binding of proposalCoordinator - Office activities.
• Any other duties etc.
• Your role as a leader:At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We connect our purpose and shared values to identify issues as well as to make an impact that matters to our clients, people and the communities. Additionally, Associate across our Firm are expected to:Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
• Respect the needs of their colleagues and build up cooperative relationships.
• Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams work to achieve the objectives.
• Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
• Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
• Offer insights based on a solid understanding of what makes Deloitte successful.
• Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.
• Understand disruptive trends and promote potential opportunities for improvement.
• Requirements:If you are someone with:Should possess a minimum Diploma / Private Secretarial Certificate.
• 2-3 years of working experience.
• Proven ability to handle confidential and sensitive materials and critical assignments in a professional manner.
• Independent, meticulous and maintain high level of professionalism.
• Mature, responsible, and hard working with pleasant personality.
• Able to priorities and multi-task.
• Resourceful and well-organized.
• Highly proficient in Microsoft Office.
• Excellent communication skills, both verbal and written.
• Able to commence within short notice will be desirable.
• Due to volume of applications, we regret only shortlisted candidates will be notified.
• Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information. Kindly apply for roles that you are interested in via this official Deloitte website.#LI-NM Requisition ID: 106245In Thailand, the services are provided by Deloitte Touche Tohmatsu Jaiyos Co., Ltd. and other related entities in Thailand ("Deloitte in Thailand"), which are affiliates of Deloitte Southeast Asia Ltd. Deloitte Southeast Asia Ltd is a member firm of Deloitte Touche Tohmatsu Limited. Deloitte in Thailand, which is within the Deloitte Network, is the entity that is providing this Website.

Skills:

DevOps, Jenkins, Automation, English

Job type:

Full-time

• Enable rapid developer onboarding to LSEG developer tools, ensuring they become productive quickly to build applications on their chosen Cloud platform.
• Improve Developer Experience by increasing their ability to improve cadence of delivery of new features.
• Unlock Developer Capacity and enable greater Innovation by modernising tooling and processes.
• Ensure that development on the integrated platform is both secure and compliant by design.
• Tech Profile/Essential Skills Good knowledge of Infrastructure as Code concepts (IAC) and basics of Microservices architecture.
• Knowledge of Cloud Technology basics across CSPs - Amazon, Microsoft, and Google (at least one).
• Knowledge and implementation experience of DevOps, CI/CD, DevSecOps concepts.
• Good level of understanding of Architecture principles, design methodologies and their applicability.
• Creating and deploying CI/CD pipelines (GitLab / Jenkins / GitHub).
• Configuring and running Code/Binary scans using solutions like SonarQube, Semgrep, Blackbuck, Trivy, GitLeaks Veracode, etc.
• Configuring and using Secrets management tools like Vault and Cloud native solutions.
• Broad knowledge of SDLC Tools, specifically Build, Test and Deploy Automation tools, e.g., Maven, Gradle, Selenium, Ansible, etc.
• Good understanding of Source code mgmt solutions like GitHub, GitLab, BitBucket, etc.
• Good understanding of Artifact and dependency mgmt solutions like JFrog, Nexus, etc.
• Good understanding on Containerisation solutions, e.g., K8, Docker, Kaniko, etc.
• Proficiency in at least one of the standard programming languages - Java/JavaScript, C#, Python, or similar Object-oriented programming.
• Proficiency in at least one of the standard scripting languages - Terraform, Bash, Ansible, etc.
• Good understanding of Software engineering concepts, e.g., coding techniques (DRY principles), Trunk based development (Branching/Merging techniques), etc.
• Good understanding of Developer Desktops - both Physical and Virtual (W365) and implementation of tooling framework/solutions for Desktops.
• Good understanding of the basics of Gen AI concepts and solutions - GitHub Copilot, GitLab Duo, Q developer.
• Previous experience in a Project delivery, Coordination or Support role.
• Previous experience of Software Development, Business and Technical Analysis, Quality Assurance, and / or Emerging Technology and Governance.
• PPM Tools (ex: Clarity, JIRA, Asana).
• Preferred Skills and Experience Hands-On experience of working on Windows/ Linux Servers. Cloud services (AWS/Azure/GCP).
• Managing incidents, change requests, service requests and driving TRT (Technical Recovery Team) calls.
• Strong problem solving skills on these platforms.
• Minimum knowledge and understanding of financial markets are desirable.
• Ability to work independently and in a team environment.
• Ability to communicate effectively in English with all levels of staff, both orally and written.
• Ability to manage own work and multitask to meet tight deadlines without losing sight of priorities under minimum supervision.
• Highly motivated, self-directed individual with a positive & pro-active attitude to work.
• Customer and service focused, with determination to meet their needs and expectations.
• Be driven and committed to the goals and objectives of the team and organization.
• Second line point of escalation in event of a major incident.
• KEY COMPETENCIES Deploys agile best practices as appropriate throughout the software development lifecycle.
• Analyses infrastructure requirements and designs the architecture for central or distributed processing to meet user requirements.
• Creates, applies and implements technologies to deliver and produce services with minimal human intervention, to improve the efficiency, reliability and speed tasks.
• Develops, tests and maintains software applications and related programs and procedures; demonstrates creativity and innovation using available software development tools and following design requirements.
• Creates and maintains documentation to describe the system and its parts, including requirements documents, design decisions, architecture descriptions, program source code and support documentation.
• Possesses depth of technical expertise, knowledge of technologies and design, development and implementation of technologies.
• Possesses knowledge of features and facilities for integration, and communication among applications, databases and technology platforms to bring together different components and form a fully functional solution to a business problem.
• Shows ability to come up with new ideas and novel approaches to problems and establish solutions through different methods.
• Partners with clients and resolves issues by diagnosing problems, determining possible resolutions and implementing effective solutions.
• Defines a problem, generates solutions, and evaluates and identifies the best solution to overcome the problem.
• Interacts well with others, quickly establishing rapport building positive relationships and networks.
• Ensures a product/service meets or exceeds specified standards and objectives to achieve desired level of quality.
• Education and Professional Skills Curious about new technologies and tools, creative thinking and initiative taking.
• Solid English reading/writing capability required.
• Strong communication & collaboration skills.
• Commitment to DevOps culture.
• Familiarity with Agile principles including any hand on experience.
• Detailed Responsibilities Ensure quality deliverables to ensure software meets or exceeds specified standards and objectives.
• Apply software engineering principles and practices to design, build, and run solutions which are scalable and reliable.
• Design, develop, modify, adapt and implement short and long-term solutions to technology needs through new and existing applications, systems architecture, network systems and applications infrastructure.
• The team(s) continuously fine-tune systems to meet stringent non-functional requirements on performance, resilience and operability, and design.
• Demonstrates significant knowledge of a single or multiple technologies and advises on design, development and implementation.
• Advances tools and applications by producing clean and efficient code and reviews others' code when required.
• Handles own workload and promotes an inclusive and open culture.
• Demonstrates depth of knowledge and expertise in software development and is regarded as the SME in their domain. Develops knowledge of other domains to understand linkages and dependencies.
• Understands the tech strategy and culture, and how they impact own work as well as adjacent teams.
• Oversees the design work and planning for user journeys ensuring the achieve the desired objectives.
• Supports the creation of solutions for Epics and the associated implementation tasks.
• Adapts existing patterns to develop robust solutions.
• Develops understanding of LSEG's commercial direction and how technology is forming a part of this.
• Completes the delivery of given tasks with some guidance and oversight.
• Builds strong relationships with senior internal stakeholders, growing network and collaborating with own team and colleagues in other domains. Communicates complex information clearly to relevant audiences.
• Takes initiative to develop knowledge in technology products and tools through on the job learning, certifications and projects.
• Must interact with global teams in time zones spanning UK, US, APAC areas.
• Engage in and improve the whole lifecycle of services from inception and design, through to deployment, operation, and refinement.
• Support services before they go live through activities such as system design consulting, developing software platforms and frameworks, capacity planning and launch reviews.
• Maintain services once they are live by measuring and monitoring availability, latency, and overall system health.
• Scale systems sustainably through mechanisms like automation and evolve systems by pushing for changes that improve reliability and velocity.
• Build a CI/CD pipeline and maintain the pipeline for Software Delivery.
• Collaborate with Security and Infrastructure teams to ensure the patching are up to date.
• Co-ordinate and work with Devops Capability team to perform the Disaster recovery for the applications.
• Participate in Project related activities to meet operational needs.
• To ensure knowledge Articles of all supported systems is continually updated.
• To provide a high level of customer service, whilst working under pressure.
• To follow and adhere to established Incident Management, Change Management and Problem Management procedures.
• LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions. Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. You will be part of a collaborative and creative culture where we encourage new ideas and are committed to sustainability across our global business. You will experience the critical role we have in helping to re-engineer the financial ecosystem to support and drive sustainable economic growth. Together, we are aiming to achieve this growth by accelerating the just transition to net zero, enabling growth of the green economy and creating inclusive economic opportunity. LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives. We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it s used for, and how it s obtained, your rights and how to contact us as a data subject. If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.