Security Engineer

• Conduct penetration testing and vulnerability assessments on web, mobile, API, cloud, and internal systems.
• Simulate real-world cyberattacks to identify exploitable weaknesses.
• Provide detailed technical reports with actionable remediation guidance to development and infrastructure teams.
• Collaborate with DevSecOps, Software Engineering, and Cloud teams to integrate security into CI/CD pipelines (shift-left approach).
• Perform source code reviews and security architecture analysis as needed.
• Research the latest threats and recommend best practices to protect Gosoft's digital assets.
• Participate in red team exercises and support incident response activities.
• Ensure compliance with company policies and applicable security frameworks (e.g., OWASP, ISO 27001, NIST).
• Educate internal stakeholders on secure coding and vulnerability mitigation.

Job Qualification

• Bachelor's Degree or higher in Computer Engineering, Cybersecurity, Information Technology, or a related field.
• 0–5 years of hands-on experience in penetration testing, ethical hacking, or security assessments.
• Familiar with penetration testing tools such as Burp Suite, Metasploit, Nmap, Wireshark, and Nessus.
• Solid understanding of OWASP Top 10, CVE, CWE, and common web/mobile application vulnerabilities.
• Experience in secure coding practices and knowledge of DevSecOps principles.
• Certifications such as OSCP, CEH, or GPEN are a plus.
• Strong analytical, communication, and report-writing skills (both in Thai and English).