Security Engineer

freeC's Client

• Design, implement, maintain IT security framework based on ISMS/ISO 27001
• Identify, analyze IT security risks (technical, people, legal…) and provide resolution to eliminate or reduce the risk
• Review the compliance of IT security with company policy & ISMS/ISO 27001
• Design, implement the security systems to protect network system against security threats (virus, Trojans, malware, spyware, malicious code, attacker/hacker…)
• Responsible for design, implement the SIEM (security information event monitoring) system including (centralized log, IDS, IPS ….)
• Member of Change Advisor Board to give recommendation for other teams when applying the importance change on core switches, firewall, cloud, etc.
• Deliver the security information & report (including vulnerability & exploitation news, security patches, fixes) and support operational team to implement the fixes/patches
• Deliver the information security system scanning, application penetration testing (OWASP standard) and support operational team to implement the fixes/patches
• Ensure BoM (Board of Management) is kept fully aware of the risks identified and progress of rectification, can report directly to CEO in emergency case
• Maintains professional and technical knowledge by attending educational workshops; reviewing professional publications; benchmarking state-of-the-art practices;
• Train and support staffs on IT security matters
• Coordinate with other teams (Infrastructure, Software, IT operation) and customer to ensure the SLA of Monitoring services as a Service Owner
• Plan and manage the resources of NOC to ensure 24/7 monitoring service
• Ensure the transparent of the information from departmental-wide to NOC team and vice-versa
• Assist IT Manager and Solution development team to evaluate & suggest for monitoring solution from System, Network monitoring to Application performance and Security Event monitoring
• Create reports: weekly reports, monthly reports, incident reports, and other reports as required by IT Manager
• Security report to CISO
• Other duties as assigned by IT Manager & Direct Manager

Education: University Degree in Computer Science or IT equivalent training

Technology skills and experience:

• At least 2+ years of experience as a Security Engineer
• Information system design and implementation
• Wide knowledge in different area (network, server hardware, system, database, software …)
• Deep knowledge in TCP/IP, security & system analysis / hacking
• Linux, Windows Server, Virtualization, Cloud Management
• ISMS/ISO 27001 knowledge is required, PCI DSS is an advantage

Soft-skills:

• English communication
• Strong troubleshooting & analyzing
• Customer oriented
• Team management
• Problem solving
• Negotiation

1. Great Benefits:

• Salary: 1,800$ - 2,000$ and bonus package (13th salary, KPIs bonus up to 3-month salary)
• Personal accident & health-care
• At least 12+ annual leave
• Meal & Parking Allowances
• Flexible working time
• Company trip, Team building, Sports and Gyms.

2. Advance your career:

• We provide you with support to sharpen your skills and knowledge for further steps in your career path
• Opportunities to learn and grow through different types of training: Talent Development program, Succession planning as well as promotions or transfers.

3. Break your limits:

• The innovation is a key value of the company. Joining our team, you are encouraged to think out of the box, cross your boundaries and improve yourself in our continuous improvement process during daily business operation.

4. Go Global:

• You will work, cooperate and exchange your creative ideas with 7,500 employees of the company. Our customers, which are 20% of Fortune 100, are located from around the world.