DM, OT Security Engineer

1. Security operations - Own all security operations of the Digital Security team, including the managed CSOC service (SIEM / while 24x7 monitoring and detection delivered by an external vendor), attack surface management, vulnerability management, endpoint security, email security, and other cybersecurity technologies in the team's portfolio. Ensure each service runs to defined coverage, quality and SLA, and hold vendors accountable to their contracts. 2.

Security consulting and design review - Advise infrastructure, application and project teams on secure design of systems, networks and applications, and on any cybersecurity matter raised across Thai Union. Represent the team in architecture and change review forums as required. 3. Technical support and escalation - Provide hands-on technical support within the team and to other teams across Thai Union on request; act as the senior technical escalation point for complex security issues. 4.

Documentation, standards and playbooks - Author and maintain technical, operational and playbook documents for security operations, e.g. incident response processes and procedures, cybersecurity standards, and the standardized security review for new systems and applications. Keep documents current and version-controlled. 5. Service request and SLA management - Receive requests from business units through the ITSM platform, assign and track work, and ensure delivery within the defined SLA.

Report SLA performance and drive improvements to the request process. 6. Technology and vendor evaluation - Evaluate new security technologies, tools and vendors; run proof-of-concepts and prepare recommendations and business cases to improve the efficiency and effectiveness of security operations at Thai Union. 7. Incident response coordination - Lead the technical response to security incidents end-to-end: triage, containment, eradication, recovery, root-cause analysis and lessons-learned reporting, coordinating with the CSOC vendor, IT and business teams. 8.

Compliance and audit support - Provide operational evidence and technical input for compliance and certification programs (e.g. ISO 27001, NIS2) and internal / external audits. 9. Budget and license management - Track license utilization, renewal dates and operational spend for security platforms, and provide input to the annual cybersecurity budget and procurement plans. 10.

Continuous improvement - Continuous tune detection rules and controls, and improve the maturity of security operations processes.