IT Security Analyst (New Grads are Welcome) - Lumentum International (Thailand) Co., Ltd.
Lumentum International (Thailand) Co., Ltd. · Pathumthani
- Location
- Pathumthani
- Salary
- Depend on qualifications and experience
- Job Type
- Full Time
- Work Type
- Onsite
- Education
- Bachelor's Degree or Higher
- Posted
- 23/07/2026
Responsibilities
1. Security monitoring and alert triage
• Monitor Security Information and Event Management (SIEM), Endpoint Detection and
Response (EDR), anti-malware, email security, web security and cloud security alerts.
• Validate, triage and prioritize security events using agreed playbooks, business impact and
risk context.
• Create accurate incident records, preserve relevant evidence and escalate incidents
through the agreed incident management process.
• Support containment, eradication and recovery activities under the direction of the incident
owner.
2. Incident response and operational support
• Follow documented incident response procedures for malware, phishing, account
compromise, data exposure, suspicious network activity and lost or stolen devices.
• Assist with post-incident actions, including evidence capture, timeline building, lessons
learned and remediation tracking.
• Maintain security operations knowledge base articles and playbooks for repeatable
response tasks.
3. Vulnerability and configuration management
• Run or support scheduled vulnerability scanning across servers, endpoints, network
devices, applications and cloud services.
• Validate scan findings, remove false positives where evidence supports this, assign
remediation tickets and monitor progress against agreed service levels.
• Support secure configuration checks against approved baselines, including endpoint
hardening, logging configuration and privileged account controls.
• Provide clear remediation guidance to infrastructure, application and service teams.
4. Identity, access, Data Loss Prevention and Multi-Factor Authentication
• Support identity and access management processes, including joiners, movers, leavers,
privileged access reviews and evidence collection for access recertification.
• Monitor and investigate Data Loss Prevention (DLP) alerts, applying agreed classification,
privacy and escalation rules.
• Support Multi-Factor Authentication (MFA) administration, user enrolment, exception
handling, break-glass access checks and failed authentication investigations.
• Assist with user access investigations where suspected compromise, misuse or policy
breach is identified.
5. Security controls and tooling
• Operate security tools in line with documented procedures and change controls.
• Support maintenance of alert rules, watchlists, endpoint policies, email filtering rules and
data protection controls under approved guidance.
• Record control issues, service defects and improvement opportunities.
• Carry out routine security checks for backup alerts, logging gaps, certificate expiry, secure
configuration and monitoring coverage.
6. Policy, compliance and assurance support
• Gather evidence for audits, risk assessments, supplier checks and compliance reviews.
• Apply relevant internal policies, standards and data handling requirements.
• Support regular checks against security standards, control requirements and business
processes.
• Identify policy exceptions or control gaps and raise them through the agreed risk
management process.
7. Awareness and stakeholder support
• Provide practical security advice to users and technical teams.
• Support phishing exercises, security awareness activities and targeted communications.
• Explain security requirements in a clear, proportionate and helpful way.
• Promote secure behaviors, including reporting suspicious activity, protecting credentials
and handling sensitive data correctly.
8. Reporting and documentation
• Maintain accurate incident, alert, remediation and evidence records.
• Prepare routine operational reports on alerts, incidents, vulnerabilities, Data Loss
Prevention (DLP), Multi-Factor Authentication (MFA), control exceptions and remediation
progress.
• Contribute to dashboards and management information using agreed metrics.
• Keep procedures, playbooks and technical notes up to date.
• Monitor Security Information and Event Management (SIEM), Endpoint Detection and
Response (EDR), anti-malware, email security, web security and cloud security alerts.
• Validate, triage and prioritize security events using agreed playbooks, business impact and
risk context.
• Create accurate incident records, preserve relevant evidence and escalate incidents
through the agreed incident management process.
• Support containment, eradication and recovery activities under the direction of the incident
owner.
2. Incident response and operational support
• Follow documented incident response procedures for malware, phishing, account
compromise, data exposure, suspicious network activity and lost or stolen devices.
• Assist with post-incident actions, including evidence capture, timeline building, lessons
learned and remediation tracking.
• Maintain security operations knowledge base articles and playbooks for repeatable
response tasks.
3. Vulnerability and configuration management
• Run or support scheduled vulnerability scanning across servers, endpoints, network
devices, applications and cloud services.
• Validate scan findings, remove false positives where evidence supports this, assign
remediation tickets and monitor progress against agreed service levels.
• Support secure configuration checks against approved baselines, including endpoint
hardening, logging configuration and privileged account controls.
• Provide clear remediation guidance to infrastructure, application and service teams.
4. Identity, access, Data Loss Prevention and Multi-Factor Authentication
• Support identity and access management processes, including joiners, movers, leavers,
privileged access reviews and evidence collection for access recertification.
• Monitor and investigate Data Loss Prevention (DLP) alerts, applying agreed classification,
privacy and escalation rules.
• Support Multi-Factor Authentication (MFA) administration, user enrolment, exception
handling, break-glass access checks and failed authentication investigations.
• Assist with user access investigations where suspected compromise, misuse or policy
breach is identified.
5. Security controls and tooling
• Operate security tools in line with documented procedures and change controls.
• Support maintenance of alert rules, watchlists, endpoint policies, email filtering rules and
data protection controls under approved guidance.
• Record control issues, service defects and improvement opportunities.
• Carry out routine security checks for backup alerts, logging gaps, certificate expiry, secure
configuration and monitoring coverage.
6. Policy, compliance and assurance support
• Gather evidence for audits, risk assessments, supplier checks and compliance reviews.
• Apply relevant internal policies, standards and data handling requirements.
• Support regular checks against security standards, control requirements and business
processes.
• Identify policy exceptions or control gaps and raise them through the agreed risk
management process.
7. Awareness and stakeholder support
• Provide practical security advice to users and technical teams.
• Support phishing exercises, security awareness activities and targeted communications.
• Explain security requirements in a clear, proportionate and helpful way.
• Promote secure behaviors, including reporting suspicious activity, protecting credentials
and handling sensitive data correctly.
8. Reporting and documentation
• Maintain accurate incident, alert, remediation and evidence records.
• Prepare routine operational reports on alerts, incidents, vulnerabilities, Data Loss
Prevention (DLP), Multi-Factor Authentication (MFA), control exceptions and remediation
progress.
• Contribute to dashboards and management information using agreed metrics.
• Keep procedures, playbooks and technical notes up to date.
Qualifications
- Bachelor Degree in Computer Science, Information Technology, Cybersecurity, or related
- fields.
- At least 1–2 years of experience in IT governance, IT audit, risk, or compliance
- Experience in cybersecurity risk assessment, threat modeling, control testing, or security governance.
- Good command of spoken and written in English.
- Strong analytical and problem-solving skills
- Good documentation and report-writing abilities
- Attention to detail and organizational skills
Benefits
- Dental insurance (สิทธิการเบิกค่าทันตกรรม)
- Provident Fund
- Staff training and development
- Fuel/transportation fees
- 5-day work week
- Performance/results-based bonus
- Annual bonus
- Social security
- Health insurance
- Accident Insurance
About Lumentum International (Thailand) Co., Ltd.
About Lumentum Lumentum (NASDAQ: LITE) is a global leader in optical and photonic technologies that power the networks and infrastructure behind AI, cloud computing, and next-generation communications. Built on decades of photonics innovation, Lumentum delivers high-performance lasers, modules, and optical subsystems that enable scalable, energy-efficient data center connectivity, advanced telecom networks, industrial manufacturing, and sensing applications. Headquartered in San Jose, California, the company operates R&D, manufacturing, and sales facilities worldwide. Learn more at www.lumentum.com
60/129, 60/90 Moo 19, Klongnueng, Klongluang, Pathumthani 12120
Human Resources Department
-

