IT Senior Security Engineer

Job Purpose:

• The IT Senior Security Engineer is responsible for ensuring the company's IT security systems are robust, compliant with internal and external policies, and aligned with industry’s best practices. This role focuses on IT governance, security policy development, security tools implementation, and coordination with regional security teams to maintain a secure IT environment.

Key Responsibilities:

• Develop, implement, and maintain IT security governance frameworks, policies, and procedures to ensure compliance with corporate and regulatory requirements.
• Create and enforce security rules and controls to support compliance with internal policies and industry standards (e.g., ISO 27001, GDPR).
• Design and implement security tools and technologies to protect the company's infrastructure, including firewalls, IDS/IPS, SIEM, DLP, endpoint security, and more.
• Monitor security systems and respond to security incidents, conducting thorough investigations and root cause analysis.
• Collaborate with regional security teams to align local security practices with global strategies.
• Perform regular risk assessments, vulnerability scans, and security audits to identify and mitigate potential threats.
• Provide expert advice on security best practices and recommend improvements to enhance the company’s security posture.
• Lead security awareness training programs for employees to promote a culture of security within the organization.
• Participate in security-related projects, ensuring security requirements are integrated into IT infrastructure and application 

• Bachelor’s degree in computer engineering, computer science, Information Security, or a related field.
• At least 5 years of experience in IT security roles, with a focus on security engineering, governance, or compliance.
• Strong knowledge of IT security frameworks, standards, and regulations (e.g., ISO 27001, NIST, GDPR).
• Hands-on experience with security tools such as firewall, SIEM, IDS/IPS, DLP, endpoint protection, and encryption technologies.
• Experience in incident response, threat analysis, and risk management.
• Strong understanding of network protocols, operating systems, cloud security, and cybersecurity principles.
• Relevant security certifications (e.g., CISSP, CISM, CISA, CEH) will be given special consideration.
• Good customer service mind and customer relationship creation.
• Good command of English is an advantage (TOEIC Score 550+ is a plus).

Key Competencies:

• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills to work effectively with cross-functional teams.
• Ability to manage multiple projects simultaneously with minimal supervision.
• High level of integrity and professionalism.

Working Conditions:

• On-site at Muang Pathumthani
• May require occasional travel to regional offices.

• Sony product discounts for employees
• TOEIC & JLPT Certificate Allowances
• Provident Fund
• Staff training and development
• Overtime
• Fuel/transportation fees
• Marriage gift
• Ordination gift
• 5-day work week
• Social security
• Health insurance
• Accident Insurance
• Ordination leave
• Employee's uniform
• Annual trip or party
• Attendance bonus or other special compensation
• Performance/results-based bonus
• Annual bonus