禾新數位有限公司

• Risks and vulnerabilities assessments with commercial tools and techniques and regular follow up with stakeholders for remediation. • Reviewing client issues and taking steps to remediate security threats and incidents. • Management of escalation process, incident response, review of incident reports, and conduct Root Cause Analysis (RAC). • Familiar with PortScan, Firewall Feature & Rules Assessment, Webservices assessment, WAF, Exploits Scanning. • Familiar with PCIDSS, PDPA or OWASP. • Assist SOC response (such as EDR/DLP/SIEM detection) and of any IT Security Incidents, Forensic and remediating gaps. • Oversee the company vulnerability management program and follow up on remediation (patching or hardening) • IT Security Audits - Security risk assessment and key control testing such as BrokenAUTH and Session, Insecure Cryptography, hash, 2FA access, account hygiene issue, AAA issue. • To conduct Awareness program and presentation on rotational basis. • Hands on experience working with cloud technology AWS, Azure, GCP, GitHub, Kubernetes and native security tools.