Kiến thức tuân thủ, kiểm toán, quy định pháp lý liên quan an ninh thông tin
Làm việc tốt trên môi trường Windows và macOS
Trách nhiệm
Vận hành và cải tiến các nền tảng bảo mật: SIEM, EDR/XDR, PAM, IAM, Quản trị lỗ hổng, DLP, Cloud Security
Giám sát, điều tra, ứng phó sự cố, troubleshooting và cải tiến liên tục Security Operations
Phân tích cảnh báo, tìm nguyên nhân gốc rễ, đánh giá tác động kinh doanh, đề xuất khắc phục
Tích hợp bảo mật vào vòng đời phát triển phần mềm (DevSecOps): CI/CD, SAST, DAST, SCA, container, IaC scanning
Có thì tốt
Chứng chỉ CISSP, CISM, GIAC hoặc tương đương
Kinh nghiệm quy mô enterprise hoặc đa quốc gia
Tham gia bug bounty hoặc nghiên cứu lỗ hổng
Tóm tắt bằng AI từ JD gốc, đọc JD gốc trước khi ứng tuyển.
Ensure the level of security and compliance in line with internal IT security documentation and legal/regulatory requirements.
Provide business stakeholders with the explanation of security risks, controls, and measures applied on behalf of IT Security.
Ensure the level of security and compliance in line with Internal IT Security documentation and legal/regulatory requirements.
Manage daily Security Operations, including monitoring, investigation, incident response, troubleshooting, and continuous improvement.
Operate and improve security platforms such as SIEM, EDR/XDR, PAM, IAM, Vulnerability Management, DLP, and most of Cloud Security solutions.
Support endpoint security and troubleshooting across Windows and macOS environments.
Analyze security alerts and findings, identify root causes, assess business impact, and recommend practical remediation.
Develop and tune SIEM use cases, correlation rules, alerts, dashboards, and detection capabilities.
Automate security activities using PowerShell, Python, REST APIs, n8n, SOAR, or similar technologies.
Embed security into the software delivery lifecycle by supporting DevSecOps practices, including CI/CD security controls, secure code scanning, dependency and container scanning, secrets management, and remediation tracking.
Collaborate with development and platform teams to integrate tools such as SAST, DAST, SCA, container security, and Infrastructure-as-Code scanning into delivery pipelines.
Work closely with Infrastructure, Network, Cloud, Application, Helpdesk, Risk, and business stakeholders to resolve security issues.
Support security projects, audits, compliance activities, vulnerability remediation, and regulatory requirements.
Improve security processes, documentation, automation, and overall operational effectiveness.
