Mô tả công việc• Design and propose, implement the security solutions to ensure the information security for VAS: SIEM, NAC, PAM…
• Research, conduct the PoC and propose the security solution to improve the information security for VAS.
• Other tasks as assigned by Management.
• Develop, review and support implementing the VAS information security policies, standards and procedures.
• Implement, manage and monitor information security, analyze the security information and event, correlate to detect the threats, intrusion, data leakage, and report to Management as well as immediately remediate the security incidents.
• Participate in IT projects and provide the security consultant to ensure the security for VAS IT systems.
• Regularly conduct the security vulnerability scanning for the applications, servers, and network devices; propose and follow up with the security findings mitigation plan to ensure the vulnerabilities are fixed on time.
• Cooperate with Procurement, Accounting, Finance team, and IT Security solutions Suppliers implementation the VAS IT Security projects complying with the VAS purchasing process and policy.
• Manage and configure the security devices: NGFW, WAF to ensure the security for VAS IT systems and endpoints.
Yêu cầu công việc• Ability to work independently and in a team, withstand work pressure, accept business trips when required.
• Good knowledge of web and mobile applications and web/mobile application security.
• Qualification: Diploma / Bachelor&039;s degree in IT
• Strong knowledge of and have designed/implemented/operated the security systems: NGFW/WAF/Vulnerability Management/SIEM.
• Good at Microsoft Office, having experience with Power BI/ Power App would be an advantage
• Work with vendors to conduct the Penetration Test for VAS IT systems and network; Analyze the test report and cooperate with related stakeholders to remediate the security findings.
• At least 2 years working in IT Security
• Strong knowledge of IT Infrastructure components: Firewalls- IPS/IDS, Network and network protocols, Windows (workstations and servers) OS/ Linux, and their security configuration.
• High responsibility and enthusiasm, discipline, supportive mindset.
• Good English skill (written and verbal) is highly preferred
• Security+ or CEH qualification would be an advantage
• Good at security incident detection, analysis, and response, especially in emergent situation.
• Carefulness, good communication skills, good at negotiation to get the job done.
