Section Manager - Security Standards & Design
On-siteSuan Luang, Bangkok, Thailand
Job Summary
Develop and maintain technical security hardening baselines for Windows, Linux, databases, and cloud services across GCP, Azure, and AWS. Translate security architecture into implementable standards, run proof-of-concept testing for new controls, and build automated compliance scanning to validate configurations against deployed systems. Lead technical testing efforts by reviewing new infrastructure deployments and producing reports on firewall rules and network segmentation. Partner with DevOps teams to embed baselines into golden images and CI/CD templates while managing the standards lifecycle through regular reviews and exception processes.
Required Qualifications
- 5+ years in information security with hands-on experience in infrastructure hardening, security configuration, and technical standards development
- Deep knowledge of CIS Benchmarks or DISA STIGs — you've implemented these on real systems, not just read the PDFs
- Hands-on experience with at least two: Windows Server hardening, Linux hardening, database security configuration, or cloud security baselines
- Experience with vulnerability scanning and compliance tools — Tenable, Qualys, or cloud-native equivalents (AWS Config, Azure Policy, GCP Security Health Analytics)
- Ability to write clear technical documentation that infrastructure teams can implement without hand-holding
- Working proficiency in scripting (PowerShell, Bash, or Python) for configuration validation and automation
Desired Qualifications
- Experience with infrastructure-as-code security — writing security-hardened Terraform modules or Ansible playbooks
- Familiarity with container and Kubernetes security hardening (CIS Kubernetes Benchmark, pod security standards)
- CompTIA Security+, CIS Benchmarks certification, or relevant cloud security certifications (AZ-500, GCP Professional Cloud Security Engineer)
- Experience in retail or high-availability environments where security hardening must balance with uptime requirements
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.