Nahc.io Hiring! Full Time (Logistics MNC) Security Engineer in 台北市, 台灣 - Ricebowl

The Security Engineer is responsible for the group's information assets against evolving threats, ensuring data confidentiality, integrity, and availability.

Core duties include:

• Evaluating and implementing new security solutions and AI services
• Proactively assessing the security posture across on-premises networks and multi-cloud environments
• Managing Microsoft 365 security and enterprise data compliance strategies
• Architecting and deploying robust security controls
• Monitoring network activities and spearheading security incident response
• Raising employee security awareness

Scope of Role
Infrastructure & Network Security

• Assess the security of information systems and networks, consistently identifying potential risks, vulnerabilities, and zero-day threats.
• Design and implement advanced security controls, including Firewalls, DLP, XDR, WAF and SOC operations etc.
• Monitor network traffic and activity for suspicious behavior and coordinate threat hunting operations.

Cloud & Microsoft Security

• Plan, manage, and optimize O365 enterprise security services, including Conditional Access, Intune, and Entra ID Protection.
• Implement data protection strategies using Microsoft Purview (e.g., managing sensitivity labels.
• Understand multi-cloud environments (Azure, AWS, GCP) and provide strategic planning and recommendations for cloud security.

Security Solutions Evaluation & Implementation

• Assist in the evaluation, planning, and implementation of new security solutions, ensuring secure adoption, seamless integration, and strict alignment with enterprise security architecture (Secure by Design).
• Lead Proof of Concept (PoC) phases for emerging cybersecurity technologies to address evolving business needs and threat landscapes.

Incident Response & SecOps Automation

• Investigate and respond to security incidents, determine the root cause, assess the impact, and execute swift corrective actions.
• Develop and integrate automated SecOps workflows using customized scripts (Python, PowerShell).

Security Culture

• Raise employee security awareness and conduct targeted security education and training.

Job Challenges

• The ever-evolving nature of security threats requires continuous learning and updating of knowledge.
• High-pressure work environment when dealing with incidents.
• Need to collaborate with people from different departments.

• Bachelor’s degree in information security or a related field
• At least 3 years of relevant work experience.
• Hands-on experience with application, system, and network security
• Familiarity with cloud computing, Linux administration, and TCP/IP protocols
• Strong knowledge of security fundamentals and best practices
• Familiarity with network security, system security, application security, etc.
• Experienced in any of Microsoft Security solutions, EDR, SIEM, DLP, Firewall, SOC, Email Security, Vulnerability Assessment, WAF will be a plus.
• Strong analytical and problem-solving skills
• Excellent communication skills in English (TOEIC 700+ preferred) and teamwork skills
• Certificates: Candidates with Security or M365 related certifications (e.g. CISSP, CISM, CISA, ISO27001, MS-102, SC-100, MD-102) will be a plus.