ตำแหน่งงานหลักสำหรับ畢業生 Network Security / Cybersecurity
| ตำแหน่ง (Role) | หน้าที่หลัก | ทักษะสำคัญ | ค่าจ้างประมาณ (THB/ปี) * |
|---|---|---|---|
| Security Analyst (SOC Analyst L1/L2) | Monitor SIEM, Triage Alerts, Initial Investigation, Ticketing | SIEM (Splunk/ELK), Log Analysis, MITRE ATT&CK, Basic Scripting | 400k - 800k |
| Security Engineer | Deploy/Manage Security Tools (Firewall, EDR, WAF, Email Sec, VPN, NAC) | Network Sec, Cloud Sec, Automation (Python/Ansible/Terraform), Hardening | 600k - 1.2M |
| Penetration Tester / Ethical Hacker | Pen Test (Web, Net, Mobile, Cloud, API), Red Team, Vuln Research | Burp, Metasploit, Cobalt Strike, OSCP, Exploit Dev, Reporting | 700k - 1.5M+ |
| Incident Responder / DFIR | IR Handling, Forensics (Memory, Disk, Network), Malware Analysis, Threat Hunting | Volatility, FTK/EnCase, KAPE, Timeline Analysis, YARA, Sigma | 800k - 1.5M+ |
| Cloud Security Engineer | Secure AWS/Azure/GCP (IAM, CSPM, CWPP, CI/CD Sec, Container Sec) | Cloud Certs (SCS, AZ-500), Terraform, K8s Sec, Serverless Sec | 800k - 1.6M+ |
| Application Security Engineer | SAST/DAST/IAST/SCA, Secure Code Review, DevSecOps, Threat Modeling | OWASP Top 10, Secure Coding, CI/CD, Semgrep, Checkmarx, Snyk | 700k - 1.4M |
| GRC / Compliance Analyst | Policy, Risk Assessment, Audit (ISO 27001, SOC2, PCI, PDPA), Vendor Risk | Frameworks (NIST CSF, ISO), Risk Mgmt, Communication, Audit | 500k - 1M |
| Threat Hunter / Intel Analyst | Proactive Hunt, TTP Mapping, Threat Intel Platforms (MISP, OpenCTI) | MITRE ATT&CK, STIX/TAXII, YARA, Sigma, Malware Analysis | 800k - 1.5M |
| Security Architect | Design Secure Architecture, Zero Trust, Reference Architectures, Standards | SABSA, TOGAF, Zero Trust, Cloud Native, Strategic Thinking | 1.2M - 2.5M+ |
| CISO / Security Leader | Strategy, Budget, Team, Board Reporting, Risk Governance, Culture | Leadership, Business Alignment, Regulatory, Crisis Mgmt | 2M - 5M+ |
* ค่าจ้างเบื้องต้น ประมาณการ ตัวแปร: ประสบการณ์, เกรด, Certs, บริษัท, สถานที่
เกรดที่ต้องการ
- Associate Degree (ป.ตรี/ป.วช.): เข้าได้ Role Entry-level (SOC L1, Jr. Engineer, Helpdesk Sec)
- Bachelor's (CS, IT, Cybersecurity, Engineering): มาตรฐานสำหรับ Role ส่วนใหญ่
- Master's/PhD: Research, Architecture, Leadership, Teaching
ใบรับรองที่มีค่า (High Value Certs)
| ระดับ | Certifications |
|---|---|
| Entry | CompTIA Security+, (ISC)² CC, Cisco CCST, Fortinet NSE 1-2 |
| Associate/Professional | CEH, CySA+, PenTest+, CCNA Security, Fortinet NSE 4, Azure/AWS Security Associate |
| Advanced/Expert | OSCP, OSWE, OSEP, CISSP, CCNP/CCIE Security, GCFA/GNFA/GREM, Cloud Expert Certs |
แนวโน้มตลาดงาน (2024-2025)
- Shortage: ขาดแคลน 3.5 ล้านตำแหน่งทั่วโลก (ISC2) - โอกาสสูง
- Remote/Hybrid: มาตรฐานในอุตสาหกรรมนี้
- Specialization: Cloud, AppSec, OT/ICS, AI Security, Crypto - ค่าจ้างสูงกว่า Generalist
- Purple Team / Detection Engineering: Role ใหม่ที่熱門 (SIEM Rule Dev, Detection as Code)
ทักษะเสริมที่ควรมี
- Programming/Scripting: Python, Go, PowerShell, Bash
- Infrastructure as Code: Terraform, Ansible, CloudFormation
- Container/Kubernetes: CKA/CKS, Helm, Operators
- Cloud: AWS/Azure/GCP (อย่างน้อย 1 Cloud Depth)
- Communication: Technical Writing, Presentation, Stakeholder Mgmt
เส้นทางค่ายิ่ง (Career Progression)
SOC L1 → SOC L2/Senior → Detection Engineer / Threat Hunter → Lead/Principal
↘ Jr. Security Engineer → Security Engineer → Senior → Staff/Principal → Architect
↘ Jr. Pen Tester → Pen Tester → Senior → Red Team Lead → Principal
↘ GRC Analyst → Senior GRC → Risk Manager → Head of GRC → CISO Track
