Design and propose, implement the security solutions to ensure the information security for VAS: SIEM, NAC, PAM…
Cooperate with Procurement, Accounting, Finance team, and IT Security solutions Suppliers implementation the VAS IT Security projects complying with the VAS purchasing process and policy
Develop, review and support implementing the VAS information security policies, standards and procedures
Manage and configure the security devices: NGFW, WAF to ensure the security for VAS IT systems and endpoints
Implement, manage and monitor information security, analyze the security information and event, correlate to detect the threats, intrusion, data leakage, and report to Management as well as immediately remediate the security incidents
Regularly conduct the security vulnerability scanning for the applications, servers, and network devices; propose and follow up with the security findings mitigation plan to ensure the vulnerabilities are fixed on time
Participate in IT projects and provide the security consultant to ensure the security for VAS IT systems
Research, conduct the PoC and propose the security solution to improve the information security for VAS
Other tasks as assigned by Management.
Yêu Cầu Công Việc
Qualification: Diploma / Bachelor's degree in IT
At least 2 years working in IT Security
Good at Microsoft Office, having experience with Power BI/ Power App would be an advantage
Good English skill (written and verbal) is highly preferred
Security+ or CEH qualification would be an advantage
Strong knowledge of IT Infrastructure components: Firewalls-IPS/IDS, Network and network protocols, Windows (workstations and servers) OS/ Linux, and their security configuration
Strong knowledge of and have designed/implemented/operated the security systems: NGFW/WAF/Vulnerability Management/SIEM
Good knowledge of web and mobile applications and web/mobile application security
Work with vendors to conduct the Penetration Test for VAS IT systems and network; Analyze the test report and cooperate with related stakeholders to remediate the security findings
Good at security incident detection, analysis, and response, especially in emergent situation
Carefulness, good communication skills, good at negotiation to get the job done
Ability to work independently and in a team, withstand work pressure, accept business trips when required
High responsibility and enthusiasm, discipline, supportive mindset.