Responsibilities:
We are seeking a highly skilled Security Solutions Consultant (Data and Applications) to lead the design and
implementation of secure data and application solutions. The ideal candidate will have experience in data
architecture, application development, security, and API integration with IT and cloud platforms.
- Design and implement secure data security architecture that align with the Company's Data Protection policy and compliance.
- Design and implementation secure application architectures and solutions that are scalable, reliable, and resilient against security threats.
- Implement identity and access management (IAM) solutions to secure user authentication and authorization.
- Integrate AI technologies to enhance security measures, including anomaly detection, predictive analytics, and automated threat response.
- Provide expertise and guidance on data protection, encryption to Implement encryption solutions for databases and applications.
- Provide consulting on Personal Data Protection Act (PDPA) compliance and ensure that all data processing activities adhere to PDPA requirements.
- Design and implement API integration solutions with IT and cloud platforms to ensure secure data exchange and application interoperability.
Requirements:
- At least 3 years of strong hands-on experience in database implementation, application security and data integration techniques.
- Proficiency in application development and secure coding practices in various programming languages (e.g., Java, C#, Python).
- Knowledge of LDAP and Active Directory.
- Experience with cloud security and cloud platforms (e.g., AWS, Azure, Google Cloud) and containerization technologies (e.g., Docker, Kubernetes).
- Extensive experience with identity security solutions and IAM frameworks.
- In-depth understanding of data protection laws and standards (e.g., GDPR, HIPAA, ISO 27001, PDPA).
- Proven experience with API integration, including designing and implementing secure API solutions with IT and cloud platforms.
- Broad experience and understanding of industry standards, framework and best practices such as ISO27001, PCI DSS, NIST, etc is highly desirable.