Security Specialist upto $2500

1. Compliance:

- Develop internal compliance procedures, framework, aligned to LOTTE GROUP’s requirements and provide training to internal stakeholders.

- Advise management on potential risks and recommend solutions to ensure compliance

and enhance the efficiency and effectiveness of Lotte Innovate’s operation.

- Ensure that third party risks are managed.

- Conduct regular internal audits to ensure compliance with regulations and internal policies.

- Conduct non-compliant incidents inspection or collaborate with other stakeholders to

conduct the inspection.

- Ensure that the Awareness program is implemented effectively.

- Review and update the Awareness program to ensure relevancy to the current

cybersecurity threats.

2. Operation:

- Involve with a team to establish policy on a security solution that applies to company.

- Produce cybersecurity requirements for all systems to protect and reduce the

cybersecurity risk.

- Control approves the request/changes related to security, control activities of IT security:

implementing, operating, vulnerabilities management.

- Analyzing potential threats to existing applications and infrastructure, including malicious

code such as viruses or worms, unauthorized access attempts, and denial of service

attacks.

- Conducting penetration tests to identify vulnerabilities in security protocols.

- Ensure all Cybersecurity Risk are recorded, tracked and addressed in the agreed timeline.

- Providing regular reports on security measures and any breaches or vulnerabilities to

management.

- Collect, analyze and produce report for IT Security every month.

- Work with both internal/external audit during regular annual security checking for LOTTE.

3. Consultant:

- Researching, Implementing, Operating, Upgrading and Management security measures

as: SIEM, Antivirus, EDR/XDR, IPS/IDS, Vulnerability assessment, PIM/PAM, WAF,

DDOS, encryption technologies, and password protection mechanisms... for the

protection of customers' data, systems, and networks (include LIVNC’s IDC).

- Participate in the incident response process in case of customers require.

- Collaborate with Sales team in order to make proposal to enhance security performance

of Lotte subsidiaries.

1. Experience:

- More than 5 year experience in equivalent positions, as Security engineer, in Network Security, Security Operations, or Penetration Testing

- Hands on experience in security systems, including Next Gen Firewall: Palo Alto, Checkpoint, Fortinet, WAF, Database Firewall, Email Security, APT, EDR, SIEM/SOAR, NAC, PAM....

- Experience in using tools to find vulnerabilities such as Kali Linux, Metasploit, Remux, CSI Linux...

2. Language: Good ability in listen, speak, read and write English documents

3. Skill:

- Strong analytical and problem-solving skills.

- Ability to explain technical concepts to sale, inexperienced users

- Hard-working and willing to learn, self-study ability

4. Acknowledgments:

- University degree in IT, Telecommunications, or equivalent

- Having certificates professional in Security (CISSP, CISA, CISM, CCSE, Cyber Ark, IBM Qradar/SIEM, IBM Guardium, PCNSE or NSE4),... is an advantage

- Knowledge about standards on security ISO 27001, PCI-DSS

- Great Awareness of Cybersecurity trends and Hacking techniques