Senior IT Security Officer (mảng Operation)

Implementing IT Security:
1. Research/develop/implement technique security standards/guide aligned with international standards, policy requirements.
2. Research/develop & implement/control implement security solutions to protect services, data.
3. Implementing tasks from IT projects of the organization, the security improvement projects.

Operating IT Security:
4. Manage and approve the configuration changes related to security.
5. Ensure new device/system apply security standards of organization and fixed vulnerabilities.
6. Operate and maintain security systems such as SIEM, IPS/IDS, DLP, and PIM…
7. Implement operational control tasks related to the security support of other departments, e.g., antivirus management and patch updates.

Technical vulnerabilities management:
8. Update information about new security vulnerabilities, virus/malwares, risks/threats daily, analyze and give recommendation to fix problems to all related departments.
9. Perform discovery vulnerabilities peodic for OS, APP, DB, networks and control fixed Plan (VA, Pentest, ASV, APT, segment test).
10. Manage and Remediation all vulnerabilities was detected with IT services.

1. Major in IT, Academy of Cryptography Techniques/University of Science and Technology or equivalent.  
2. Have 3 - 5 years of experiences in Information Security field, good knowledge about technologies about security such as IAM, Firewall, IDS/IPS, Filtering, DLP, SIEM, WAF, FIM, PIM, RMS, Vunerabilities management, Patch managent, endpoint protection, PKI.
3. Have good knowleged for: network, OS, web/application, database and other product.  
4. Have good knowleged for system intergrate and architect.  
5. Well-trained about Redhat/CentOS, Debian, Unix, AIX; Windows. Be able to use effectively exploit, testing, hacking tools. Good knowledge about attack/offence techniques.  
6. Good knowledge about international security standards, good oriented on technology, wide understanding about various technologies and services.  
7. Good knowledge about security frameworks: ISO 27001, PCI DSS, ITIL…