{"id":183554,"url":"https://alion.io/job/dxc-technology-security-engineer-4","title":"Security Engineer","company":{"id":88,"name":"DXC Technology","domain":"dxc.com","url":"https://alion.io/company/dxc-technology","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":165,"ghost_share":0,"stale_share":0.855,"repost_share":0.012,"time_to_fill_p50_days":27,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bangkok, Thailand"],"countries":["TH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":9500,"max_usd":26000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":575},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Okta","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-01T08:09:54Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-10-20T01:06:03Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"Job Description:\nVulnerability Management & Security Hardening - Tenable\nAdminister and operate Tenable for vulnerability, compliance, configuration, and security hardening assessments.\nConfigure and execute authenticated and unauthenticated scans across in-scope infrastructure.\nAssess systems against approved security baselines, including CIS Benchmarks and vendor-recommended hardening standards.\nAnalyse and validate vulnerabilities and configuration findings, determine remediation requirements, and coordinate corrective actions with technology owners.\nPerform rescans and validation to confirm remediation and closure of findings.\nTroubleshoot scan coverage, credential, authentication, plugin, and related operational issues.\nSupport vulnerability and hardening reporting, remediation tracking, risk acceptance, and exception processes.\nCloud Security - Microsoft Defender for Cloud\nAdminister and monitor Microsoft Defender for Cloud across in-scope cloud resources and workloads.\nReview and manage Secure Score, security recommendations, cloud security posture findings, regulatory compliance views, and security alerts.\nIdentify cloud security misconfigurations, vulnerabilities, and control gaps and coordinate remediation with Cloud and Infrastructure teams.\nSupport configuration and optimisation of Defender for Cloud plans, policies, workload protection, and security posture capabilities.\nInvestigate relevant cloud security alerts and support remediation and incident response activities.\nMaintain visibility of security coverage and track cloud security findings through closure.\nSecure Remote Access - VPN & ZTNA\nSupport the operation of enterprise VPN and ZTNA solutions.\nAssist with secure remote-access and identity-based access policies.\nSupport investigation and troubleshooting of connectivity, authentication, authorisation, certificate, and application-access issues.\nWork with Network, Identity, Endpoint, and other technical teams to resolve secure-access issues.\nSupport access reviews, configuration changes, upgrades, and continuous improvement activities.\nApply Zero Trust and least-privilege principles when supporting remote-access requirements..\nIdentity & Access Management - Okta\nSupport Okta-based identity and access management services.\nAssist with SSO, MFA, authentication policies, and application integrations.\nSupport investigation and resolution of authentication, federation, MFA, and application-access issues.\nWork with relevant teams on identity federation and integration requirements using technologies such as SAML, OAuth 2.0, and OpenID Connect (OIDC).\nSupport reviews of authentication and access configurations and recommend security improvements.\nAssist with integration of Okta with VPN, ZTNA, applications, and other enterprise technologies.\nNetwork Access Control - Aruba ClearPass\nSupport Aruba ClearPass Network Access Control (NAC) operations.\nAssist with authentication, authorisation, device profiling, and network-access policy activities.\nSupport investigation and troubleshooting of endpoint authentication, connectivity, posture, and policy-enforcement issues.\nWork with Network and Identity teams on ClearPass integrations with wired and wireless infrastructure and directory services.\nSupport reviews and improvements of network-access policies based on user, device, and security requirements.\nSecurity Engineering & Operational Support\nMonitor the health, availability, coverage, and effectiveness of supported security technologies.\nInvestigate security issues and coordinate resolution with internal technical teams, vendors, and product support where required.\nSupport security incidents, technical investigations, and remediation activities.\nImplement approved security changes in accordance with established change-management processes.\nMaintain technical documentation, configuration records, operational procedures, and knowledge articles.\nPrepare operational reports covering security posture, vulnerabilities, control health, trends, and remediation status.\nIdentify opportunities for security process improvement, automation, and operational efficiency.\nProvide technical evidence and support for security assessments, audits, and compliance activities.\nCollaborate with Security Operations, Network, Infrastructure, Cloud, Identity, and Application teams to improve the overall security posture.\nRequired Experience\n2-3 years of relevant hands-on experience in cybersecurity engineering, security operations, network security, cloud security, identity and access management, or related security engineering roles.\nDemonstrated experience supporting security technologies in medium to large enterprise environments.\nAbility to independently administer, configure, troubleshoot, and support enterprise security technologies.\nExperience working across Security, Network, Infrastructure, Cloud, Identity, and Application teams.\nStrong problem-solving skills with the ability to investigate technical issues and drive them through resolution.\nMandatory Technical Experience\nCandidates must have practical, hands-on experience with all of the following:\nTenable - vulnerability scanning, authenticated scanning, compliance/configuration assessment, security hardening, finding analysis, remediation validation, and scan troubleshooting.\nMicrosoft Defender for Cloud - Cloud Security Posture Management (CSPM), Secure Score, security recommendations, workload protection, alerts, security policies, and remediation.\nFoundational Technical Knowledge\nNetworking & Network Security - TCP/IP, DNS, DHCP, routing, VLANs, network segmentation, firewalls, and common network protocols.\nOperating System Security - Windows and Linux security, system hardening, patching, and secure configuration concepts.\nIdentity & Access Management - Active Directory, Microsoft Entra ID, IAM, SSO, MFA, RBAC, SAML, OAuth 2.0, and OpenID Connect.\nVulnerability & Configuration Management - vulnerability management lifecycle, security configuration management, CIS Benchmarks, and secure configuration baselines.\nCloud Security - Microsoft Azure security fundamentals, including identity, networking, access control, security posture, and workload security.\nCryptography & Secure Communications - TLS, digital certificates, encryption, and PKI fundamentals.\nSecurity Monitoring & Incident Response - security logging, monitoring, alert investigation, and incident response fundamentals.\nZero Trust Security - Zero Trust principles, least-privilege access, identity-based access, and secure-access concepts.\nEnterprise VPN - understanding of VPN architecture, secure remote-access policies, authentication, connectivity, and common troubleshooting concepts.\nOkta - understanding of SSO, MFA, authentication policies, identity federation, application integration, and access-management concepts.\nZero Trust Network Access (ZTNA) - understanding of policy-based secure access, identity- and context-based access, application access, and ZTNA architecture.\nAruba ClearPass - understanding of Network Access Control (NAC), authentication and authorisation, device profiling, policy enforcement, and network-access concepts.\nPreferred / Additional Skills\nMicrosoft Defender for Endpoint / Microsoft Defender XDR.\nMicrosoft Sentinel or another enterprise SIEM platform.\nPrivileged Access Management (PAM) technologies.\nFirewall and network-security platforms.\nAzure Policy and other Azure-native security controls.\nPowerShell or Python scripting for automation, reporting, or operational tooling.\nExperience integrating security platforms using APIs.\nQualifications\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant professional experience.\nRelevant industry or product certifications are advantageous, such as Microsoft Security/Azure, Tenable, Okta, Aruba ClearPass, CompTIA Security+, or networking certifications.\nCore Competencies\nStrong cybersecurity fundamentals and technical troubleshooting capability.\nAbility to analyse security findings and determine appropriate remediation actions.\nAbility to work independently while collaborating effectively across technical teams.\nStrong ownership of technical issues from identification through resolution.\nClear written and verbal communication, including the ability to explain technical risks and recommendations.\nGood documentation, operational reporting, and stakeholder-management skills.\nAbility to prioritise activities based on technical risk, business impact, and operational requirements.\nAt DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.\nRecruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here .","description_format":"text","description_chars":9569,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Managed IT Services (MSP)","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-09-01T08:09:54Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.309,"p_room":0.36,"age_days":48,"expected_fill_days":27,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/dxc-technology-security-engineer-4","json_url":"https://alion.io/job/dxc-technology-security-engineer-4.json","meta":{"generated_at":"2026-10-20T08:05:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8590,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":88},"rest":"https://alion.io/mcp/rest/get_company?id=88"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdxc-technology-security-engineer-4"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdxc-technology-security-engineer-4"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdxc-technology-security-engineer-4"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dxc-technology-security-engineer-4\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdxc-technology-security-engineer-4"}]}