Chi tiết công việc
• Design and propose, implement the security solutions to ensure the information security for VAS: SIEM, NAC, PAM…
• Cooperate with Procurement, Accounting, Finance team, and IT Security solutions Suppliers implementation the VAS IT Security projects complying with the VAS purchasing process and policy.
• Develop, review and support implementing the VAS information security policies, standards and procedures.
• Manage and configure the security devices: NGFW, WAF to ensure the security for VAS IT systems and endpoints.
• Implement, manage and monitor information security, analyze the security information and event, correlate to detect the threats, intrusion, data leakage, and report to Management as well as immediately remediate the security incidents.
• Regularly conduct the security vulnerability scanning for the applications, servers, and network devices; propose and follow up with the security findings mitigation plan to ensure the vulnerabilities are fixed on time.
• Participate in IT projects and provide the security consultant to ensure the security for VAS IT systems.
• Research, conduct the PoC and propose the security solution to improve the information security for VAS.
• Other tasks as assigned by Management.

Yêu cầu công việc
• Qualification: Diploma / Bachelor's degree in IT
• At least 2 years working in IT Security
• Good at Microsoft Office, having experience with Power BI/ Power App would be an advantage
• Good English skill (written and verbal) is highly preferred
• Security+ or CEH qualification would be an advantage
• Strong knowledge of IT Infrastructure components: Firewalls-IPS/IDS, Network and network protocols, Windows (workstations and servers) OS/ Linux, and their security configuration.
• Strong knowledge of and have designed/implemented/operated the security systems: NGFW/WAF/Vulnerability Management/SIEM.
• Good knowledge of web and mobile applications and web/mobile application security.
• Work with vendors to conduct the Penetration Test for VAS IT systems and network; Analyze the test report and cooperate with related stakeholders to remediate the security findings.
• Good at security incident detection, analysis, and response, especially in emergent situation.
• Carefulness, good communication skills, good at negotiation to get the job done.
• Ability to work independently and in a team, withstand work pressure, accept business trips when required.
• High responsibility and enthusiasm, discipline, supportive mindset.