JOB DETAILS

JOB DETAIL

•Provide day-to-day operational support and maintenance of OT VA and IT VA Services.
•Work with customers to coordinate, conduct, and tune network and system vulnerability scans prior to deployment and when those systems are modified.
•Responsible for understanding, reviewing, and interpreting assessment and scanning results, reducing false positive findings, and acting as a trusted security advisor to customer.
•Provide Vulnerability Assessment Scanning and guidance, False Positive Validation, Attestation Signing, Compliance Scanning, policy creation and supports operational teams in various vulnerability remediation and management activities.
•Maintain existing operational documentation to ensure that any newest changes are captured.

REQUIRED WORK EXPERIENCE

- Male and Female (Thai Nationality)
- Age 25 - 35 years old
- Bachelor's or Master's degree in Computer Engineering, Computer Science, Information Technology, Mechanical Engineering or related fields.
- Minimum 3 years of experience with Tenable, Qualys and vulnerability management.
- 3+ years of experience with scripting with shell/python and rest API.
- Experience with threat modeling and Working knowledge of vulnerabilities, exploitation, and threats to an organization.
- Experience with with Vulnerability Management processes - scanning appliances, vulnerability reporting output and risk classification.
- Experience in IT, optimally in Security, with exposure to infrastructure and application vulnerability scan configurations, vulnerability assessments and vulnerability management.
- Experience with Tenable, Qualys, scripting, e.g. in Python.
- Have experience vulnerbility scanning tools, patch management and compliance management.
- Working knowledge of security principles, techniques, and technologies.
- Good understanding of network protocols, design, and security operations.
- Strong analytical skills and efficient problem solving.
- Willingness to share on-call responsibilities, work non-standard hours, and travel when required.
- Understanding of best practices in common security technologies, SIEMs, firewalls, IDS/IPS and endpoint AV.
- Certifications from vulnerability management areas
- Current GCIH, CEH, CISSP, or similar certifications.