Bangkok, Thailand
Estimated range. Confirm compensation with the employer.
We check listings for employer identity, role clarity, and application links before publishing.
Listing record updated: October 9, 2026. We archive records after 60 days without an update. This date does not confirm that the employer is still hiring.
Wondering if your experience matches this role? Upload your CV to see matched skills, a fit score, and areas to develop.
The Section Manager - Penetration Tester is responsible for conducting security assessments across web applications, internal infrastructure, Active Directory, cloud environments, and networks to identify vulnerabilities. The role involves performing adversary emulation and purple team exercises with the SOC and Blue team to validate detection capabilities. The position requires preparing technical reports and presenting security findings and risks to stakeholders.
Conduct penetration testing and security assessments across web applications, internal infrastructure, Active Directory, cloud environments, and network infrastructure to identify security vulnerabilities.
Perform adversary emulation and purple team exercises by collaborating with SOC and Blue team to validate detection capabilities and improve incident response.
Assess the security posture of Active Directory, Microsoft Entra ID, cloud platforms (AWS, Azure, GCP), and identity infrastructure against common attack techniques.
Support the development and tuning of detection rules for SIEM, EDR, Identity Protection, and other security monitoring platforms.
Prepare technical reports and present security findings, risks
Bachelor's or associate degree in IT, Computer Science, or related field.
At least 5+ years of experience in security design, operation or implementation
Strong knowledge of current cyber threats, attack techniques, security controls, and enterprise IT infrastructure across Windows, Linux, Active Directory, cloud, and network environments.
Strong understanding of the MITRE ATT&CK Framework, Cyber Kill Chain, and OWASP Top 10, with the ability to emulate attacker techniques and validate security controls.
Experience with common penetration testing tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Mimikatz, or equivalent
Job listings are sourced from company websites and career pages. Learn more about how we source jobs.
Bangkok Jobs is not affiliated with the hiring companies. Please verify all job details directly with the employer before applying. We are not responsible for the accuracy of job postings or hiring decisions.