IT Security Expert/ Senior Officer (Administration & Operation)

Implementing IT Security:
1.Research, develop, implement, and control technical security standards aligned with international security frameworks and organizational policies.
2.Research, implement, and manage security solutions to protect IT infrastructure, services, and data.
3.Develop, maintain and optimize information security policy/rule/configuration for solutions to ensure information security such as: Information security solutions on access identity management (PAM, IAM…); Network information security solutions (Firewall, NAC, APT, NetIPS, DDOS...); Information Security solutions on endpoints (AD GPO, HIPS/HFW, Appcontrol, Web/mail filtering, DB security…); Information security solutions on data (DLP, FAM...); Information security solutions on Cloud Services (AWS, Office 365).
4. Participate in security projects, focusing on Network Access Control (NAC), Database Firewall (DBFW), and Data Loss Prevention (DLP)...
5.Expand and optimize security solutions, including Antivirus, PAM, IPS, SIEM, and Internet Control, ensuring compliance with SBV regulations and industry best practices.
Operating IT Security:
6.Manage and approve security-related configuration changes.
6.Ensure newly deployed systems comply with organizational security standards and are patched against known vulnerabilities.
7.Operate and optimize security systems such as PAM, SIEM, IDS/IPS, DLP, PIM, NAC, DBFW...
9.Perform security control tasks such as Antivirus management, security patch updates, and security compliance monitoring.

- Major in IT, Academy of Cryptography Techniques/University of Science and Technology or equivalent 
- Have at least 5 years of experiences in Information Security field, good knowledge about technologies about security such as IAM, Firewall, IDS/IPS, Filtering, DLP, SIEM, WAF, FIM, PIM, RMS, NAC, DBFW, Vunerabilities management, Patch managent, endpoint protection, PKI...
- Have good knowleged for: network, OS, web/application, database and other product
- Have good knowleged for system intergrate and architect" 
- Well-trained about Redhat/CentOS, Debian, Windows
- Be able to use effectively exploit, testing, hacking tools.
- Good knowledge about attack/offence techniques
- Good knowledge about international security standards, good oriented on technology, wide understanding about various technologies and services.
- Good knowledge about security frameworks/ standards: ISO 27001, PCI DSS, ITIL…

• Job type: Permanent