Security Operations

• Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms
• Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS
• Investigate suspicious activity and identify potential root causes
• Support incident response, remediation, and recovery activities
• Determine appropriate escalation paths and coordinate with relevant cybersecurity teams
• Work with Incident Response specialists to investigate and manage threats
• Identify opportunities to improve detection quality and reduce false positives
• Support security monitoring optimization and whitelist tuning
• Prepare technical reports, summaries, and security findings
• Maintain SOC documentation, procedures, and knowledge-base content
• Contribute to process improvements and operational quality initiatives

Security Operations jobs in Thailand

Security Operations Analyst – Cyber Defense