Roles ใน Network Security: ทำหน้าที่อะไรบ้าง? ต่างกันยังไง?
🎯 Network Security Engineer (NSE) - ระดับ Operation & Engineering
- Core Duties: Deploy/Manage Firewall (NGFW), VPN, NAC, Segmentation, DDoS Protection, DNS Security
- Daily: Rule Changes, Log Analysis, Alert Triage, Firmware Upgrades, HA Failover Testing, Vendor Cases
- Projects: Firewall Migration, Zero Trust Implementation, Cloud Network Security (AWS/Azure/GCP), Merger Integration
- Skills: Palo Alto (PCNSE), Fortinet (NSE 4-7), Cisco (CCNP/CCIE Sec), Check Point (CCSE), Cloud FW, Automation (Ansible, Terraform, Python)
- Certs: PCNSE, NSE 4/5/6/7, CCNP Security, CCIE Security, CCSP, AWS Security Specialty
🎯 Network Security Specialist / Analyst - ระดับ Monitoring & Operations
- Focus: SIEM/NDR Monitoring, Alert Investigation, Threat Hunting Support, Vulnerability Scanning, Compliance Reporting
- Daily: SOC Queue Triage, False Positive Tuning, Log Source Onboarding, Threat Intel Enrichment, Shift Handover
- Skills: Splunk/Elastic/KQL, Sigma Rules, MITRE ATT&CK, Wireshark/Zeek, Vuln Scanners (Nessus, Qualys)
- Certs: Security+, CySA+, GCFA, GNFA, GCED, CCNA Security
🎯 Network Security Architect - ระดับ Strategy & Design
- Focus: Security Architecture Design, Standards/Policies, Technology Evaluation, Roadmap, Governance
- Deliverables: Reference Architectures, Security Patterns, Design Reviews, RFP/RFI Responses, Board Reporting
- Skills: Zero Trust, SASE/SSE, Cloud Security Architecture, Threat Modeling (STRIDE, PASTA), Risk Assessment (FAIR, NIST 800-30)
- Certs: CISSP, CCSP, SABSA, TOGAF, CISM, PCNSE/CCIE Sec (Technical Depth)
🎯 การเปรียบเทียบ Roles ทั้งหมดใน Cybersecurity
| Role | Focus | Key Keywords | Typical Certs | Salary Range (THB/Month - Thailand 2024) |
|---|---|---|---|---|
| SOC Analyst L1/L2 | Monitoring, Triage | SIEM, Alerting, Ticketing, Basic Forensics | Security+, CySA+, GCFA | 35k-70k |
| Network Security Engineer | Firewall, VPN, Segmentation, Cloud NetSec | NGFW, ZTNA, Automation, Cloud FW | PCNSE, NSE7, CCNP Sec, CCSP | 60k-150k |
| Security Engineer (App/Cloud/Infra) | AppSec, CloudSec, DevSecOps, InfraSec | SAST/DAST, CSPM, IaC Security, K8s Sec | GWAPT, CCSP, CKS, OSCP | 70k-160k |
| Threat Hunter / Detection Engineer | Proactive Detection, Rule Writing | Sigma, MITRE, YARA, Malware Analysis, NDR | GCFA, GNFA, GREM, OSCP | 80k-180k |
| Security Architect | Design, Strategy, Governance | Zero Trust, SASE, Threat Modeling, Risk Mgmt | CISSP, CCSP, SABSA, CISM | 120k-250k+ |
| CISO / VP Security / Head of Security | Leadership, Business Alignment, Risk, Compliance | Strategy, Budget, Board Reporting, Regulation | CISSP, CISM, CRISC, MBA | 200k-500k+ |
| Penetration Tester / Red Teamer | Offensive Security, Adversary Simulation | OSCP, OSEP, CRTO, CBBH, Red Team Ops | OSCP, OSEP, CRTO, CBBH | 80k-200k+ |
| GRC / Compliance Analyst | Policy, Audit, Risk, Regulatory | ISO27001, PCI-DSS, PDPA, NIST, Audit | CISA, CISM, CRISC, ISO27001 LA | 50k-130k |
🛠️ ทักษะ Core สำหรับ Network Security Roles ทุกตัว
- Networking Fundamentals: TCP/IP, Routing (BGP/OSPF/EIGRP), Switching (VLAN/STP/LACP), DNS, DHCP, IPv6
- Security Protocols: TLS 1.3, IPsec, SSH, Kerberos, RADIUS/TACACS+, SAML/OIDC, mTLS
- Scripting/Automation: Python (Netmiko, NAPALM, Scapy, Requests), Ansible, Terraform, Git/GitLab CI
- Cloud Network Security: VPC/VNet, Security Groups/NSG, Transit Gateway, Firewall Manager, Private Link/Endpoints
- Visibility Tools: Wireshark, Zeek, NetFlow/IPFIX, tcpdump, nmap, masscan
🚀 Career Progression Paths
Path 1 (Technical Deep Dive): NOC/SOC L1 → Network Sec Engineer → Senior Engineer → Principal Engineer → Distinguished Engineer/Fellow Path 2 (Architecture & Strategy): Network Sec Engineer → Security Architect → Enterprise Architect → CTO/CISO Office → CISO Path 3 (Management & Leadership): Senior Engineer → Team Lead → Engineering Manager → Director Security → VP Security → CISO Path 4 (Offensive & Specialized): SOC Analyst → Threat Hunter → Red Teamer → Principal Red Teamer → Adversary Emulation Lead Path 5 (Consulting & Advisory): Senior Engineer → Security Consultant → Principal Consultant → Practice Lead → Partner / vCISO
💡 เลือก Role ไหนดี? (Self-Assessment)
- ชอบ Hands-on Config, Troubleshooting, Firewalls → Network Security Engineer
- ชอบ Analysis, Investigation, Writing Rules → Threat Hunter / Detection Engineer
- ชอบ Design, Big Picture, Talk to Business → Security Architect
- ชอบ Break Things, Find Flaws, Adrenaline → Penetration Tester / Red Teamer
- ชอบ Policy, Audit, Compliance, Governance → GRC / Compliance
- อยากเป็น Boss, Strategy, P&L → Management Track → CISO
