• To perform Endpoint and Network Security which includes OS Hardening, Endpoint Detection and Response (EDR) process, NG Firewalls, Email Security, Port Scanners, Remote Access Protocol Security, Password Guessing & Bruteforce, SIEM. • To liaise with various teams such Devops, SA and NOC for IT Security projects. • To design security solutions that compliance according to internal policies and guidelines. • To assist SOC on response and remediation of IT Security Incidents. • Oversee vulnerability management, Dataloss prevention program and follow up on remediation. • To perform IT Security risk assessment and key control testing. • To conduct IT Security Awareness program such as Phishing Campaign and presentation. • Hands on experience working with either AWS, GCP, Azure, and native security tools. • Conduct simple Network pentest of internal OS, Network, Remote Access Protocol and Infra using Kali Linux. #資安 #WAF #Kali #IT Security

1.威脅防禦和事件應變： •規劃與管理防火牆、網路入侵檢測系統（NIDS）及入侵防護系統（IPS)。 •管理事件升級流程、事件回應、審查事件報告並進行根本原因分析(RAC)。 •檢核並確認資安問題並採取措施修復安全威脅和事件。 •回應SOC （例如 EDR/DLP/SIEM 檢測）以及IT Security相關事件之取證和彌補差距。 2.風險評估和弱點管理： •系統安全性分析：評估資訊環境和網路系統的安全性，識別潛在的風險和弱點。 •漏洞分析和修復：進行漏洞分析，發現並修復軟體和硬體中的安全漏洞。 • 安全風險評估和關鍵控制測試，such as BrokenAUTH and Session, Insecure Cryptography, hash, 2FA access, account hygiene issue, AAA issue.

• Risks and vulnerabilities assessments with commercial tools and techniques and regular follow up with stakeholders for remediation. • Reviewing client issues and taking steps to remediate security threats and incidents. • Management of escalation process, incident response, review of incident reports, and conduct Root Cause Analysis (RAC). • Familiar with PortScan, Firewall Feature & Rules Assessment, Webservices assessment, WAF, Exploits Scanning. • Familiar with PCIDSS, PDPA or OWASP. • Assist SOC response (such as EDR/DLP/SIEM detection) and of any IT Security Incidents, Forensic and remediating gaps. • Oversee the company vulnerability management program and follow up on remediation (patching or hardening) • IT Security Audits - Security risk assessment and key control testing such as BrokenAUTH and Session, Insecure Cryptography, hash, 2FA access, account hygiene issue, AAA issue. • To conduct Awareness program and presentation on rotational basis. • Hands on experience working with cloud technology AWS, Azure, GCP, GitHub, Kubernetes and native security tools.