Job application

About Company

We are a fast-growing fintech company with multiple global operations across Thailand and other international markets. Our services span digital payments, e-wallets, and B2B financial solutions.

‍

Role Purpose

LightNet is seeking a hands-on Senior IT Security Engineer to implement, operate andcontinuously improve security controls across its cloud infrastructure, corporate IT,T,endpoints, identities and applications.Working under the direction of the CTO and Head of IT Security, the role is responsible fofortranslating security policies, regulatory requirements and risk management objbjectives intoeffffective technical controls.The successful candidate will work closely with Engineering, DevOps and IT teams tostrengthen LightNet's security posture, address vulnerabilities, respond to threats andmaintain security controls appropriate fofor a regulated financial-servrvices environment.

‍

Key Responsbilities

Infrastructure, Cloud and Endpoint Security

• Implement and maintain security controls across AWAWS/A/Azure, corporate IT,T,endpoints and mobile devices
• Manage endpoint protection (EDR), device security, hardening and secureconfigurations
• Implement cloud security controls covering IAM, networking, encryption, secretsmanagement and logging.
• Identify fy and remediate security misconfigurations and infrastructure risks.

Vulnerability and Security Risk Management

• Conduct vulnerability scanning, prioritise findings and drive remediation throughto closure.
• Coordinate patch management and remediation of penetration-testing findings.
• Implement technical controls to address identified security risks and compliancegaps.

Identity and Access Security

• Implement and maintain IAM, MFAFA, privileged-access management and accesscontrols.
• Conduct access reviews and remediate excessive or inappropriate privileges.
• Secure servrvice accounts, credentials, keys and privileged identities.

Security Monitoring and Incident Response

• Operate and improve security monitoring across SIEM, MDR, EDR and cloudplatfoforms.
• Investigate security alerts and execute incident containment, remediation andrecovery activities.
• Maintain security detection rules, response playbooks and operationalprocedures.
• Coordinate with external security servrvice providers where required.

Application Security and DevSecOps

• Implement security controls within CI/CD pipelines, including SAST, T, SCA, secretsand container scanning.
• Work with Engineering and DevOps to remediate application, API andinfrastructure vulnerabilities.
• Support security testing and remediation fofor web and mobile applications.

Security Compliance and Operational Assurance

• Implement and maintain technical controls aligned with applicable regulatoryrequirements and security standards.
• Maintain security documentation, control evidence and audit trails.
• Support regulatory examinations, internal/external audits and securityassessments
• Identify fy control weaknesses and execute security improvement initiatives.
• Support employee securit

‍

Required Qualifications

Essential

• 5+ years of hands-on IT security or cybersecurity engineering experience,including responsibility fofor implementing and operating security controls.
• Proven experience securing cloud infrastructure (AWAWS and/or Azure), endpointsand corporate IT environments.
• Strong technical experience with EDR, SIEM, vulnerability management, IAM,MFA FA and privileged-access controls.
• Practical experience in security incident investigation, response and remediation.
• Working knowledge of network security, operating-system hardening and securityautomation.
• Experience implementing technical security controls in financial servrvices, fintechor another regulated environment.
• Ability to independently deliver security engineering initiatives and collaborateeffffectively with IT, T, Engineering and DevOps teams.

Desirable

• Experience with DevSecOps, application/A/API security, mobile security and CI/CDpipelines.
• Familiarity with ISO 27001, PCI DSS, SOC 2 and applicable financial-servrvicesregulatory requirements
• Experience with MDM, BYOD security and cloud security posture management.
• Scripting and automation skills (Python, PowerShell or equivalent).
• Relevant certifications such as CISSP, P, CCSP, P, AWAWS Security Specialty, AzureSecurity Engineer or equivalent

Personal Attributes

• Hands-on and delivery-oriented: Able to independently implement, troubleshootand improve security controls.
• Risk- and compliance-aware: Understands how technical security controlssupport regulatory obligations and business risk management.
• Pragmatic and accountable: Balances security requirements with operationalneeds and drives remediation to completion.
• Collaborative: Works effffectively with technical teams and communicates securityissues clearly to management.

‍