Sr./Mid SOC Analyst - Security, DevSecOps Testing

• Review and analyze security logs, monitor activities, and implement security measures to protect systems, networks, and data.
• Perform security scan & penetration tests for system & network, web applications and desktop applications, identify and assess security vulnerabilities.
• Work with customers for analyzing vulnerabilities and threats in customer cases, conducting risk assessments and providing recommendations for risk mitigation.
• Prepare and present detailed security reports and findings to customers, highlighting security risks and proposing remediation strategies.
• Work with product primes in developing and implementing security policies, procedures and standards to ensure compliance with regulatory requirements and industry best practices into product lifecycles.
• Involve in designing security solutions, system requirements, system architecture, and system design for security features.
• Provide support on security topics for customers and other internal project teams.
• Refine and categorize the alert system to ensure alerts are relevant and actionable.
• Escalate security risks to higher levels when identified.

Required skills/Experience:

• Ability to learn new things fast or passion in investigating new technology trends.
• Good at problem-solving and troubleshooting.
• Strong communication and report-writing skills to communicate with foreign customers.
• Strong understanding of Network Security protocols and Data Protection techniques.
• Proven ability to deploy and manage security technologies such as firewalls, IDS/IPS, and endpoint security solutions.
• Strong ability to research CVEs to understand deeply how it can be exploited and fixed.
• At least 2 years of experience in security
• Should have at least a security testing (CEH, GCIA, GCIH, GSOC or similar professional certification)
• Skilled in evaluating security vulnerabilities and crafting comprehensive strategies, policies, and risk management.
• Strong Computer Networking knowledge is a plus.
• Virtualization, Cloud Computing (AWS, Azure) background is a plus.
• Experience in penetration testing and Pen-testing certificates (eJPT, OSWE, OSCP) are a plus
• Automation testing skillset or experience is a plus.
• Foundation in Software testing or ISTQB cert is a plus.
• English: TOEIC 650+

Years of experiences: At least 3+ years

• Working in an international, dynamic and professional environment with many opportunities to develop career.
• Having opportunities of being trained oversea and working directly with oversea customer
• A stable and rewarding position where your long-term commitment will be highly valued.
• Technical & Soft skills internal training courses
• Many company activities (Sport and music festival, TMA Futsal league ...) are held annually.
• Competitive salary and bonus.
• Total Health Care Insurance
• Loan Fund
• Team Building Fund