Suanluang, Bangkok, Thailand
Estimated range. Confirm compensation with the employer.
We check listings for employer identity, role clarity, and application links before publishing.
Listing record updated: October 9, 2026. We archive records after 60 days without an update. This date does not confirm that the employer is still hiring.
Wondering if your experience matches this role? Upload your CV to see matched skills, a fit score, and areas to develop.
CP Axtra (Makro Pro) is hiring a Section Manager for Security Standards & Design to own its library of technical security standards, hardening baselines, and design governance processes. The role writes CIS-aligned hardening guides for Windows, Linux, databases, and cloud services, runs proof-of-concept tests for new security controls, and builds automated compliance checks to detect configuration drift.
Candidates need 5+ years in information security with hands-on infrastructure hardening experience, deep knowledge of CIS Benchmarks or DISA STIGs, experience with vulnerability scanning tools such as Tenable or Qualys, scripting skills in PowerShell, Bash, or Python, and the ability to write clear technical documentation. The role partners with infrastructure, cloud, and DevOps teams to embed baselines into golden images, Terraform modules, and CI/CD templates.
Develop and maintain technical security hardening baselines for Windows Server, RHEL/Ubuntu, databases (Oracle, MSSQL, PostgreSQL), and cloud services across GCP, Azure, AWS
Translate security architecture decisions into implementable standards documents with acceptance criteria, configuration examples, and validation scripts
Run proof-of-concept testing for new security controls, documenting performance impact and integration requirements
Build and maintain automated compliance scanning using tools like Tenable, Qualys, or cloud-native benchmarks
Conduct technical security configuration reviews for new infrastructure deployments, cloud landing zones, and major application releases before go-live
5+ years in information security with hands-on infrastructure hardening, security configuration, and technical standards development
Deep knowledge of CIS Benchmarks or DISA STIGs with real implementation experience
Hands-on experience with at least two of: Windows Server hardening, Linux hardening, database security configuration, or cloud security baselines
Experience with vulnerability scanning and compliance tools such as Tenable, Qualys, AWS Config, Azure Policy, or GCP Security Health Analytics
Working proficiency in scripting (PowerShell, Bash, or Python) for configuration validation and automation
Infrastructure-as-code security with hardened Terraform modules or Ansible playbooks; Kubernetes security hardening (CIS Kubernetes Benchmark, pod security standards); CompTIA Security+, CIS Benchmarks, AZ-500, or GCP Professional Cloud Security Engineer certifications; retail or high-availability environment experience
Job listings are sourced from company websites and career pages. Learn more about how we source jobs.
Bangkok Jobs is not affiliated with the hiring companies. Please verify all job details directly with the employer before applying. We are not responsible for the accuracy of job postings or hiring decisions.