CIRT Security Expert (Fluent in English )

Key Responsibilities Security Operations & Incident Handling ▸ Monitor systems and networks to detect potential threats, anomalies, or attempted breaches ▸ Investigate and respond to security incidents, containing and remediating vulnerabilities in a timely manner ▸ Design and implement defensive strategies and systems to protect against intruders and emerging threats ▸ Conduct root-cause analysis following incidents and prepare detailed incident reports, including findings and recommendations ▸ Perform forensic analysis to support incident investigations, where required ▸ Serve as 3rd-tier escalation point for critical security incidents outside business hours, with 1st and 2nd tier monitoring handled by an external SOC Continuous Improvement ▸ Stay current with the latest security technologies, threat intelligence, and industry trends ▸ Attend relevant conferences, training, and educational events to maintain and expand expertise ▸ Recommend and implement process or technology improvements to strengthen the organization's security posture ▸ Support the rollout of new tools, processes, and controls aimed at optimizing the company's security systems Collaboration & Training ▸ Partner with project teams and business units, providing security consultation and resolving issues effectively ▸ Develop and deliver training materials to site personnel to improve organization-wide security awareness and performance ▸ Conduct testing (e.g., penetration testing, vulnerability assessments) on security products and systems QUALIFICATIONS ▸ Minimum 3 years of hands-on experience in information security (5+ years strongly preferred) ▸ Demonstrated experience in incident handling and investigation, as part of a CIRT, SOC, or equivalent (Red Team/Blue Team) ▸ Industry certification in a security technical field (e.g., SANS/GIAC, CISSP, CEH, or equivalent) ▸ Strong written and verbal communication skills in English ▸ Willingness to participate in a 3rd-tier on-call escalation rotation (frontline monitoring handled by an external SOC) PREFERRED / NICE TO HAVE ▸ Experience with digital forensics analysis ▸ Experience with fraud analysis or investigation ▸ Familiarity with SIEM tools, threat intelligence platforms, or automation/orchestration (SOAR) What We Offer: ▸ Flexible working arrangements within a small, collaborative team ▸ Direct exposure and reporting line to the CISO, with visibility into strategic security decisions ▸ Hands-on exposure to a modern IT stack — full cloud environments, blockchain, AI, and other emerging technologies Support for professional development (certifications, conferences, training) ▸ Enjoy a positive and inclusive work environment ▸ Life, Health, Accident Insurance ▸ Provident Funds ▸ 15 Days Holiday ▸ 7 Days Business Leave ▸ 5 Days work week ▸ Flexible Hours As Maxbit Digital Asset Co., Ltd. is a digital asset business operator under the supervision of the Securities and Exchange Commission, the company is required to conduct a criminal record check to assess the qualifications and suitability of individuals for this position. You can study the details about the processing of personal data of applicants at https://www.maxbit.co.th/public/c0a6b7e66495d637f447f7f1bdf9e250/documents/Privacy_Notice/Maxbit_Candidate_Privacy_Notice.pdf.