| หมวดหมู่ | หัวข้อสำคัญ (Key Topics) | เครื่องมือ/เทคโนโลยีที่นิยมสอน |
|---|
| Networking Fundamentals (พื้นฐานเครือข่าย) - บังคับ | OSI/TCP-IP Model, IP Addressing/Subnetting, Routing/Switching (Static, OSPF, BGP), VLAN/Trunking, DNS/DHCP, NAT/VPN, Wireless (802.11), IPv6 | Cisco Packet Tracer, GNS3, EVE-NG, Wireshark, Linux Networking (ip, ss, nftables) |
| Security Principles & Models | CIA Triad, AAA, Zero Trust, Defense in Depth, Least Privilege, Threat Modeling (STRIDE, PASTA), Risk Management (NIST RMF, ISO 27005) | NIST CSF, MITRE ATT&CK, CIS Controls, OWASP Top 10 |
| Network Security Technologies | Firewall (Stateful, NGFW, UTM), IDS/IPS (Snort, Suricata, Zeek), VPN (IPsec, SSL/TLS, WireGuard), Proxy/WAF, DLP, NAC/802.1X, DNS Security (DNSSEC, DoH/DoT), Email Security | Palo Alto, Fortinet, Cisco (ASA/Firepower), Check Point, pfSense/OPNsense, Zeek, Suricata |
| Cryptography & PKI | Symmetric/Asymmetric, Hashing, Digital Signatures, Certificates (X.509), PKI/CA, TLS/SSL (1.2/1.3), IPsec, SSH, VPN Encryption, Key Management (HSM, KMS) | OpenSSL, GnuPG, Let's Encrypt, cert-manager, HashiCorp Vault, AWS KMS |
| Monitoring, Detection & Response | SIEM (Splunk, Elastic, Sentinel), Log Management, NDR (Zeek, Corelight), EDR/XDR Integration, Threat Intelligence (STIX/TAXII, MISP), Incident Response (NIST 800-61), SOAR | Splunk, Elastic Stack, Microsoft Sentinel, Wazuh, TheHive, Cortex XSOAR, Velociraptor |
| Cloud & Modern Network Security | Cloud Networking (VPC, Transit Gateway, VNet), Cloud Firewall (AWS Network Firewall, Azure Firewall, GCP Firewall), SASE/SSE (Zscaler, Netskope, Cloudflare, Palo Alto Prisma), Container/K8s Network Security (Cilium, Calico, Istio), Zero Trust Network Access (ZTNA) | AWS/Azure/GCP Console, Terraform, Ansible, Cilium, Istio, Zscaler, Cloudflare |
| Offensive Security (เพื่อเข้าใจการป้องกัน) | Recon, Scanning (Nmap, Masscan), Exploitation (Metasploit), Password Attacks, Wireless Attacks, Pivoting, C2 Frameworks, Web App Testing (Burp Suite, OWASP ZAP) | Kali Linux, Metasploit, Nmap, Burp Suite, Cobalt Strike (Sim), Sliver, BloodHound |
| Governance, Risk, Compliance (GRC) | Policy/Standard/Procedure, Audit, Compliance (PCI-DSS, HIPAA, GDPR, PDPA, ISO 27001), Vendor Risk, Security Awareness | GRC Platforms (LogicGate, AuditBoard, ServiceNow GRC), CIS Benchmarks |
| ตำแหน่ง (Role) | หน้าที่หลัก | ระดับ | เงินเดือนไทย (ประมาณ THB/เดือน) |
|---|
| Network Security Engineer | Design, Implement, Manage Firewall/VPN/IDS/IPS/NAC/SD-WAN | Junior - Senior | 40,000 - 150,000+ |
| SOC Analyst (Tier 1/2/3) | Monitor, Triage, Investigate, Respond Alerts (SIEM/EDR/NDR) | Entry - Senior | 30,000 - 120,000+ |
| Threat Hunter | Proactive Hunt (Hypothesis-driven), MITRE ATT&CK, Threat Intel | Senior/Expert | 80,000 - 200,000+ |
| Incident Responder / Forensics | IR Plan, Containment, Eradication, Forensics, Root Cause Analysis | Senior/Expert | 90,000 - 250,000+ |
| Cloud Security Engineer (Network Focus) | Cloud Network Security (VPC, FW, WAF, ZTNA, CSPM), IaC Security | Mid - Senior | 70,000 - 180,000+ |
| Security Architect (Network/Cloud) | Design Security Architecture, Standards, Reference Architectures, Evaluation | Expert/Lead | 120,000 - 300,000+ |
| Penetration Tester / Red Teamer (Network Focus) | External/Internal Network Pentest, Red Team Ops, Adversary Simulation | Mid - Expert | 70,000 - 250,000+ |
| Managed Security (MSSP/MDR) Analyst/Engineer | Manage Client Security (SIEM, EDR, Firewall, Vuln Mgmt) across tenants | Mid - Senior | 60,000 - 150,000+ |
ใบรับรองที่แนะนำ (Certifications Roadmap)
Entry / Foundation
- CompTIA Security+ (SY0-701): Baseline ทุกคนควรมี (DoD 8570 Compliant)
- (ISC)² CC (Certified in Cybersecurity): Entry-level ใหม่ ฟรีเรียน ฟรีสอบ (ปีแรก)
- Cisco CCNA (200-301): Networking Foundation (บังคับสำหรับ NetSec)
- Fortinet NSE 1-3 (Free): Awareness, Network Security Associate
Professional / Specialized (Core Network Security)
- Palo Alto Networks PCNSE: มาตรฐานอุตสาหกรรมสำหรับ NGFW Engineer (High Demand, High Salary)
- Fortinet NSE 4 (FortiGate) → NSE 5/6/7: Fortinet Ecosystem (Popular in Thailand/APAC)
- Check Point CCSA → CCSE → CCSM: Check Point Ecosystem (Enterprise, Gov)
- Cisco CCNP Security (SCOR 350-701 + Concentration): Cisco Ecosystem
- GIAC GNFA (Network Forensic Analyst) / GCFA (Forensic Analyst): Deep Technical, Forensics Focus
Advanced / Architecture / Management
- (ISC)² CISSP: Gold Standard for Management/Architecture (ต้อง 5 ปี Exp)
- ISACA CISM: Security Management/Governance Focus
- SABSA / TOGAF Security Architecture: Enterprise Security Architecture
- GIAC GSE (Security Expert): Highest Technical (GSE-Entry → GSE-Master)
- Cloud Specific: AWS Security Specialty, Azure Security Engineer (AZ-500), GCP Cloud Security Engineer
แหล่งเรียนรู้แนะนำ (Learning Resources)
- Free/Structured: Cisco NetAcad (CCNA), Fortinet NSE Institute (Free NSE 1-4), Palo Alto Networks Cybersecurity Academy, Microsoft Learn (Security), AWS Skill Builder, Google Cloud Skills Boost
- Paid/Subscription: CBT Nuggets, INE, A Cloud Guru (Pluralsight), StationX, Antisyphon Training, Hack The Box Academy, TryHackMe (Learning Paths)
- Hands-on Labs: Hack The Box (Machines, Pro Labs), TryHackMe, RangeForce, AttackDefense, Let's Defend (SOC), Blue Team Labs Online (BTLO)
- Communities (ไทย): ThaiCERT, Blognone, Facebook Groups (Thailand Cyber Security, Network Engineer Thailand, SysAdmin Thailand), Meetups (OWASP Bangkok, Cloud Native Thailand, BSides Bangkok)
แนวทางเริ่มต้นสำหรับผู้เริ่มต้น (Roadmap for Beginners)
- เดือน 1-3: Networking Basics (CCNA Level) + Linux Fundamentals (LPI Linux Essentials / RHCSA Prep) + Python/Bash Scripting Basics
- เดือน 4-6: Security+ (SY0-701) + Intro to Network Security (Firewall, VPN, IDS/IPS Concepts) + Build Home Lab (VirtualBox/VMware/Proxmox: pfSense, Ubuntu, Kali, Windows)
- เดือน 7-12: เลือก Vendor Specialization (Palo Alto PCNSE / Fortinet NSE 4 / Check Point CCSA) + Hands-on Labs (HTB, TryHackMe, RangeForce) + Start Cloud Security (AWS/Azure/GCP Networking + Security Services)
- ต่อเนื่อง: CISSP/CISM (เมื่อมีประสบการณ์), Threat Hunting, Incident Response, Cloud Security Certs, Automation (Ansible/Terraform/Python for Security)
สรุป
Network Security เรียนรู้ครอบคลุม Networking + Security Principles + Technologies (Firewall, VPN, IDS/IPS, ZTNA, Cloud) + Monitoring/Response (SIEM/XDR/IR) + Offensive (Pentest) + GRC
ความยาก: ปานกลาง-สูง ต้องมีพื้นฐาน Networking/Linux/Scripting แต่อาจารย์/หลักสูตรดีจะสอนทีละขั้น
โอกาสงาน: มาก เงินเดือนสูง (Junior 40k+, Senior 150k+, Architect 300k+)
ใบรับรองแนะนำ: Security+ → CCNA → Vendor Cert (PCNSE/NSE4/CCSA) → CISSP/CISM/Cloud Certs
กุญแจสำคัญ: Hands-on Lab ทุกวัน + Continuous Learning + Community Engagement
