security-engineer

<FINNOMENA> is a Thai financial platform that provides investment research, market news, fund recommendations, and tools to help retail investors discover, select, and manage mutual funds. It publishes market alerts and weekly insights, offers fund screeners, real-time prices (e.g., gold), tax-saving fund promotions, and supports account opening and fund purchases including its own managed funds. The service functions as a combination of financial media, investment toolkit, and fund distribution channel targeted at individual investors.

Finnomena is Thailand’s leading all-in-one digital wealth management platform for investors and financial advisors with over 100k investment accounts opened.

"Ahead of the Game"

Our management team has over 50 years of combined industry experience in global financial institutions like JP Morgan, Krungsri, Citi, CIMB Principal, UOB among others.  

We utilize our proprietary ML technology and a hybrid robo-advisory model to generate the above market returns and deliver an amazing tech-enabled user experience.

We are the only fully integrated digital wealth management platform in the region that provides professionally generated investment content via our own investor’s knowledge hub (with over 30m in monthly views and >1.2m social media followers). We are different in our non-biased advisory approach by representing over 19 asset management companies and counting.

Finnomena has achieved significant growth to date and is poised to scale rapidly; we recently raised a $10M Series B from reputed regional and local investors to further build and expand our business. 

Come join the fastest growing FinTech in Thailand!

For more information please visit us at https://www.finnomena.com.

Finnomena in News:
https://www.techinasia.com/finnomena-bags-10m
https://www.businesstimes.com.sg/asean-business/wealth-management-platform-finnomena-franklin-templeton-to-bring-investment-solutions

FINNOMENA

• Lead Internal Penetration Testing: Perform deep-dive manual and automated penetration tests on web applications, mobile apps, and microservices.
• Adversarial Emulation: Design and execute red-team scenarios to test the organization’s detection and response capabilities.
• Vulnerability Management & Exploitation: Beyond scanning, validate and exploit findings to demonstrate real-world risk and prioritize remediation for engineering teams.
• Secure Architecture Review: Conduct threat modeling and architectural "stress tests" to identify logic flaws in new features before a single line of code is deployed.
• Automated Offensive Tooling: Develop custom scripts and integrate offensive security tools (DAST, IAST) into the CI/CD pipeline to catch "low-hanging fruit" automatically.
• Remediation Advocacy: Partner with developers to provide "exploit-to-fix" guidance, ensuring they understand the how and why behind security patches.
• Incident Support: Act as a subject matter expert during security incidents to help analyze attack vectors and post-mortem findings.

Security Engineer

Security Engineer leading internal penetration testing efforts to protect complex systems. Collaborating with SRE team to proactively hunt for weaknesses across applications, cloud infrastructure, and APIs.

Siam Makro Public Company Limited is a Thailand-based company operating cash and carry trade centers under the "Makro" brand. They specialize in wholesale for professional business operators, offering a wide range of products including fresh and dry food, as well as non-food supplies. Their customer base primarily includes retailers, food retailers, caterers, and other service operators. With a strong presence in the wholesale sector, Siam Makro aims to provide competitive prices and value to its business customers.

Our vision is to bring about change for how life could be better fulfilled with good health, love, joy, and well-being. We are committed to being a trusted partner to our professional customers. For over 30 years, Makro has been committed to developing its business, products, and services to be in line with the needs of its customers, together with expanding the business in its home market of Thailand as well as abroad through various formats and sales channels to create and maintain its competitive advantage.

Our mission is “To become the number one B2B and B2C retailer in Asia, combining both online and offline platforms, by fulfilling our customers’ daily needs with technology, innovation, and operational excellence, together with individuals and partners in a sustainable way.”

At Makro, “People” are always placed as one of the company’s top priorities, with a goal to become an “Employer of Choice for All Generations”, by focusing on engagement and modernizing the organization, we aim to be a place for all generations to grow, develop and succeed within their life and career.

Siam Makro Public Company Limited

• The Head of Cyber Security is responsible for leading and managing the organization’s cybersecurity strategy, governance, risk management, and operational security functions
• This role ensures the security of IT infrastructure, applications, and data across the wholesale business while aligning cybersecurity initiatives with business objectives
• The role also oversees compliance with regulatory requirements and industry best practices to mitigate cybersecurity risks
• Develop and implement cybersecurity policies, standards, and guidelines to align with business needs and regulatory requirements
• Lead enterprise-wide risk assessment and mitigation strategies to ensure cybersecurity resilience
• Establish a cybersecurity governance framework, ensuring adherence to compliance requirements (e.g., ISO 27001, NIST, GDPR, PDPA)
• Manage third-party security risks, including vendor security assessments and contractual compliance
• Design and implement robust security architectures to protect the organization's IT assets and digital infrastructure
• Work closely with IT teams to integrate security into cloud environments, network systems, and enterprise applications
• Oversee vulnerability management, penetration testing, and secure software development lifecycle (SDLC) practices
• Develop and manage IAM strategies, ensuring appropriate user access controls and authentication mechanisms
• Oversee Privileged Access Management (PAM) and Single Sign-On (SSO) solutions to strengthen security posture
• Ensure role-based access control (RBAC) and least privilege principles are enforced across systems
• Lead the Security Operations Center (SOC) to monitor, detect, and respond to cybersecurity threats in real time
• Oversee incident response, forensic investigations, and cyber threat intelligence initiatives
• Implement advanced security analytics, Security Information and Event Management (SIEM), and threat-hunting capabilities
• Develop and execute cybersecurity awareness training programs for employees

Associate Director – Cyber Security

Lead Cyber Security strategy managing governance and risk across IT infrastructure and applications in the wholesale sector. Ensure compliance with industry regulations and best practices while mitigating risks.

• Develop and implement the organization’s offensive security strategy.
• Lead red teaming and advanced persistent threat (APT) simulations to assess security defenses.
• Oversee enterprise-wide penetration testing programs and provide risk-based recommendations.
• Manage a team of offensive security professionals and oversee security assessments.
• Perform threat modeling and attack simulations against critical IT assets.
• Collaborate with executive leadership to align offensive security with business objectives.
• Evaluate and integrate advanced security tools and technologies for attack simulation.
• Provide technical leadership in security research, vulnerability analysis, and adversary tactics.
• Deliver strategic insights and reports to C-level executives and security committees.
• Drive internal cybersecurity awareness and training initiatives.
• Keep up with global cybersecurity trends, new attack techniques, and regulatory changes.


Associate Director – Cyber Security Offensive Engineer

Associate Director leading cybersecurity offensive security initiatives in a hybrid role. Managing red teaming, attack simulations, and enhancing overall security resilience with a focus on executive collaboration.

• Perform advanced penetration testing on networks, applications, cloud environments, and IT infrastructure.
• Conduct vulnerability assessments and security audits to identify and mitigate risks.
• Develop and execute simulated cyber-attacks to test security defenses.
• Research and utilize latest attack methodologies to assess resilience against real-world cyber threats.
• Perform threat modeling to anticipate potential attack vectors and weaknesses.
• Develop custom security tools and scripts for automation and testing purposes.
• Provide detailed reports on security vulnerabilities, risks, and recommended mitigations.
• Work with the Blue Team to enhance cybersecurity strategies and improve defensive measures.
• Keep up-to-date with emerging security threats, vulnerabilities, and exploits.
• Educate internal teams on offensive security techniques and best practices.

Senior Manager – Cyber Security Offensive Engineer

Senior Manager responsible for conducting cybersecurity offensive engineering and penetration testing activities. Collaborating with teams to enhance security posture against threats in the organization.

Coda is a global payment and commerce solution provider that helps businesses accelerate growth through customizable web stores, expansive payment options, and distribution networks. With over 400 payment methods, Coda enables customers to monetize their content effectively while minimizing risks associated with fraud and compliance. Coda's marketplace, Codashop, allows publishers to sell in-game currencies and content to a wide audience across multiple platforms, ensuring a seamless experience for both businesses and consumers.

Coda leads in commerce solutions and out-of-app monetization. Since 2011, we’ve accelerated growth for our partners by expanding their global reach and deepening customer engagement. Trusted by over 300 publishers—including Activision, Electronic Arts, Moonton, and Riot Games—we maximize revenue with solutions like Custom Commerce, Codapay, Codashop, and Distribution. By connecting our partners to more than 90% of the world's preferred payment methods, we unlock access to over 200M paying customers worldwide.

Headquartered in Singapore with a team of 400+, Coda has earned recognition as a 2023 APAC High Growth Company by the Financial Times, one of Granite Asia’s NextGenTech 30 (2024), a payments leader in Fortune’s Fintech Innovation Asia list (2024), and featured in The Straits Times Fastest Growing Fintechs (2024).

Coda

• Work closely with the engineering team on all security initiatives, ensuring that products are built securely by default and that audits and remediation efforts are managed to ensure smooth and timely resolution
• Be flexible, resourceful in problem-solving, and willing to take on new challenges as the business evolves
• Conduct comprehensive risk assessments and vulnerability analyses to identify potential threats and security gaps in existing and new systems/architectures
• Implement and manage static and dynamic code analysis tools in the CI/CD pipelines
• Perform security reviews of the source code and advise developers on the remediation
• Conduct system vulnerability scanning to identify infrastructure vulnerabilities in networks, systems, middleware and databases
• Conduct vulnerability risk assessments to evaluate the likelihood and potential impacts of each identified vulnerability.
• Manage the remediation lifecycle with a risk-based approach to ensure that all vulnerabilities are remediated in accordance with accepted industry standards.
• Manage the end-to-end process of handling externally reported vulnerabilities or bug bounty reports

Security Specialist

Security Specialist in Application Security team securing applications from attacks and safeguarding the business. Coda delivers commerce solutions supporting global growth for partners in gaming and finance.

Hybrid Security Engineers roles in Thailand

Browse 5 hybrid security engineers roles hiring in Thailand plus related opportunities such as cybersecurity, security operations, cybersecurity engineer and security analyst.

5 jobs found

Security Engineer

FINNOMENA

Associate Director – Cyber Security

Siam Makro Public Company Limited

Associate Director – Cyber Security Offensive Engineer

Siam Makro Public Company Limited

Senior Manager – Cyber Security Offensive Engineer

Siam Makro Public Company Limited

Security Specialist

Coda