(Logistics MNC) Security Engineer at nahc.io (Taipei, Taiwan)(Logistics MNC) Security Engineer

The Security Engineer is responsible for the group's information assets against evolving threats, ensuring data confidentiality, integrity, and availability.

Core duties include:

• Evaluating and implementing new security solutions and AI services
• Proactively assessing the security posture across on-premises networks and multi-cloud environments
• Managing Microsoft 365 security and enterprise data compliance strategies
• Architecting and deploying robust security controls
• Monitoring network activities and spearheading security incident response
• Raising employee security awareness

Scope of Role Infrastructure & Network Security

• Assess the security of information systems and networks, consistently identifying potential risks, vulnerabilities, and zero-day threats.
• Design and implement advanced security controls, including Firewalls, DLP, XDR, WAF and SOC operations etc.
• Monitor network traffic and activity for suspicious behavior and coordinate threat hunting operations.

Cloud & Microsoft Security

• Plan, manage, and optimize O365 enterprise security services, including Conditional Access, Intune, and Entra ID Protection.
• Implement data protection strategies using Microsoft Purview (e.g., managing sensitivity labels.
• Understand multi-cloud environments (Azure, AWS, GCP) and provide strategic planning and recommendations for cloud security.

Security Solutions Evaluation & Implementation

• Assist in the evaluation, planning, and implementation of new security solutions, ensuring secure adoption, seamless integration, and strict alignment with enterprise security architecture (Secure by Design).
• Lead Proof of Concept (PoC) phases for emerging cybersecurity technologies to address evolving business needs and threat landscapes.

Incident Response & SecOps Automation

• Investigate and respond to security incidents, determine the root cause, assess the impact, and execute swift corrective actions.
• Develop and integrate automated SecOps workflows using customized scripts (Python, PowerShell).

Security Culture

• Raise employee security awareness and conduct targeted security education and training.

Job Challenges

• The ever-evolving nature of security threats requires continuous learning and updating of knowledge.
• High-pressure work environment when dealing with incidents.
• Need to collaborate with people from different departments.

• Bachelor’s degree in information security or a related field
• At least 3 years of relevant work experience.
• Hands-on experience with application, system, and network security
• Familiarity with cloud computing, Linux administration, and TCP/IP protocols
• Strong knowledge of security fundamentals and best practices
• Familiarity with network security, system security, application security, etc.
• Experienced in any of Microsoft Security solutions, EDR, SIEM, DLP, Firewall, SOC, Email Security, Vulnerability Assessment, WAF will be a plus.
• Strong analytical and problem-solving skills
• Excellent communication skills in English (TOEIC 700+ preferred) and teamwork skills
• Certificates: Candidates with Security or M365 related certifications (e.g. CISSP, CISM, CISA, ISO27001, MS-102, SC-100, MD-102) will be a plus.