Senior Specialist, IT Infosecurity Technical & Operations

Key Responsibilities

• Oversee and support daily cybersecurity operations, including administration, optimization, and troubleshooting of security technologies (e.g., firewalls, EPP, EDR, NDR, VMDR, SIEM, SWG, VPN, etc.).
• Monitor, analyse and respond to security alerts and incidents, performing detailed investigations and ensuring proper containment, eradication, and recovery.
• Lead technical execution of cybersecurity projects, contributing to solution design, implementation planning and full operational deployment.
• Provide security expertise and technical input to IT infrastructure and application teams to ensure secure configuration and deployment of systems and services.
• Participate actively in the Information Security Incident Response process, including playbook refinement, incident handling, and post‑incident reviews.
• Stay current with relevant cybersecurity frameworks and standards such as CIS Controls, MITRE ATT&CK, ISO 27001, PDPA, and industry best practices, applying them to enhance the organisation’s security posture.
• Implement, review, and enhance cloud security controls across cloud environments, providing secure‑by‑design guidance and integrating cloud telemetry into security monitoring platforms to strengthen visibility, threat detection, and response capabilities.

Job Requirements

• Degree or diploma in an IT related field, such as Cybersecurity, Computer Science, Information Technology, or a closely related discipline.
• Minimum 3–5 years of hands-on experience in cybersecurity operations, security monitoring or security engineering roles.
• Candidates with professional certifications in cybersecurity or cloud security such as Security+, CEH, CISSP, CCSP, AWS Security Specialty or AZ‑500 are considered an advantage but are not mandatory.
• Minimum 3 years of work experience in information security operations.
• Experience working in an IT integrator or vendor environment is an advantage.
• Background in compliance, governance, or audit functions is an added advantage.