Senior Security Infrastructure (Disaster Recovery) Officer

Security Operations & Administration
- Administer, configure, and operate firewalls, IDS/IPS, WAF, DLP, NAC, PAM, DBFW, SIEM, and other network security systems.
- Monitor and analyze security alerts and firewall logs; identify anomalies and respond to incidents.
- Maintain and optimize secure network segmentation, ACLs, NAT, and routing policies.
- Oversee patching, upgrades, and health monitoring for security devices and appliances.
- Manage system performance, availability, and scalability of security platforms.
Incident Response & Troubleshooting
- Lead or support incident handling: root cause analysis, containment, remediation, and recovery actions.
- Document incidents, impact assessments, and corrective measures.
- Provide 24/7 operational support (on-call rotation) for critical security infrastructure.
System Optimization & Improvement
- Perform capacity planning, performance tuning, and high availability configuration for security systems.
- Develop automation scripts (Python, PowerShell, Ansible, etc.) to improve monitoring, alerting, and operational efficiency.
- Collaborate with infrastructure teams (network, system, database) to troubleshoot cross-platform issues.
Collaboration
- Work closely with the Policy & Audit team to provide system data, reports, and evidence for compliance and audit checks.
- Coordinate with vendors for support, upgrades, and new feature adoption.
- Mentor junior engineers in system administration and incident handling..

1. Experience:
- 5+ years of hands-on experience in network or security administration.
- Hands-on experience with enterprise-class firewalls (Palo Alto, Check Point, Fortinet, Cisco ASA/Firepower), IDS/IPS, - DLP, SIEM (QRadar, Splunk, ELK), PAM (CyberArk), NAC (Cisco ISE/Forescout), DBFW.
- Strong troubleshooting and incident response experience in 24/7 environments
2. Skills and Competencies:
- Solid knowledge of networking protocols (TCP/IP, BGP, OSPF, VLAN, etc.).
- Proficiency in OS & security system administration (Linux/Unix/Windows).
- Good understanding of cyber threat landscapes and attack vectors.
- Scripting / automation skills (Python, PowerShell, Ansible) – strong plus.
- Familiarity with cloud security (AWS, Azure) is an advantage.
- Strong teamwork, analytical, and problem-solving skills.
3. Language: Vietnamese, English

• Job type: Permanent