| ตำแหน่ง (Job Title) | หน้าที่หลัก (Key Responsibilities) | ทักษะสำคัญ (Key Skills) |
|---|
| Network Security Engineer | ออกแบบ Deploy จัดการ Firewall, VPN, IDS/IPS, NAC, Proxy, Load Balancer, SD-WAN Security, Troubleshoot Network Security Issues | Firewall (Palo Alto, FortiGate, Check Point), Routing/Switching, VPN (IPsec, SSL), Scripting (Python, Ansible), Cloud Network Security |
| Security Analyst (SOC Analyst L1/L2/L3) | Monitor SIEM, Triage Alert, Incident Response, Threat Hunting, Log Analysis, Vulnerability Management | SIEM (Splunk, Elastic, Sentinel, QRadar), MITRE ATT&CK, Log Analysis, Basic Scripting, Ticketing (Jira, ServiceNow) |
| Penetration Tester / Ethical Hacker | External/Internal Pentest, Web App Pentest, API Pentest, Wireless Pentest, Social Engineering, Red Teaming, Report Writing | OSCP/OSCE, Burp Suite, Nmap, Metasploit, Custom Scripting, Exploit Dev, AD Attack/Defense |
| Security Architect | ออกแบบ Security Architecture, Reference Architecture, Zero Trust, SASE, Cloud Security Architecture, Security Requirements, Threat Modeling | TOGAF/SABSA, Cloud (AWS/Azure/GCP), Zero Trust, Identity, Encryption, Compliance, Communication |
| Cloud Security Engineer | Secure Cloud Infrastructure (IaaS/PaaS/SaaS), CSPM, CWPP, CIEM, IaC Security (Terraform, CloudFormation), Container/K8s Security | AWS/Azure/GCP Security Services, Kubernetes, Terraform, CI/CD Security, Serverless, DevSecOps |
| Identity & Access Management (IAM) Engineer | Manage IdP (AD, Azure AD, Okta, Ping), MFA, SSO, PAM, Lifecycle Management, Access Reviews, RBAC/ABAC | Active Directory, Azure AD/Entra ID, Okta, SailPoint, CyberArk, SCIM, OIDC/SAML, PowerShell |
| GRC / Compliance Analyst | Risk Assessment, Policy/Procedure, Audit Support (ISO 27001, SOC 2, PCI-DSS, PDPA, GDPR), Vendor Risk, Control Mapping | Risk Frameworks (NIST, ISO, FAIR), Audit, Policy Writing, Communication, Project Management, Regulatory Knowledge |
| Application Security (AppSec) Engineer | SAST/DAST/IAST/SCA Integration, Secure Code Review, DevSecOps Pipeline, Threat Modeling, Developer Training, Bug Bounty Management | OWASP Top 10, SAST Tools (SonarQube, Checkmarx), DAST, SCA, CI/CD (GitLab, GitHub, Jenkins), Secure Coding (Java, .NET, Python, Go) |
| CISO / Security Manager / Director | Strategy, Budget, Team Building, Board Reporting, Risk Management, Compliance, Incident Leadership, Vendor Management | Leadership, Business Acumen, Risk Management, Communication, Regulatory, Technical Depth, Certifications (CISSP, CISM, CCISO) |
ทักษะที่ต้องมี (Core Skills)
Technical (Hard Skills)
- Networking: TCP/IP, Routing (OSPF, BGP), Switching (VLAN, STP), DNS, DHCP, HTTP/HTTPS, TLS/SSL
- Firewall/IDS/IPS/NAC/Proxy/VPN Configuration & Troubleshooting
- OS Hardening: Windows (GPO, PowerShell), Linux (systemd, SELinux, AppArmor, Auditd)
- Scripting/Automation: Python, Bash, PowerShell, Ansible, Terraform
- Cloud: AWS/Azure/GCP Networking & Security Services (Security Group, NACL, Firewall, WAF, GuardDuty, Defender)
- SIEM/Log Analysis: Splunk SPL, KQL (Sentinel), Lucene (Elastic), Sigma Rules
- Vulnerability Management: Nessus, OpenVAS, Qualys, Remediation Tracking
- Cryptography: PKI, TLS, IPsec, SSH, Encryption at Rest/In Transit
Soft Skills
- Communication: อธิบายเทคนิคให้ Non-technical เข้าใจ, Report Writing, Presentation
- Critical Thinking & Problem Solving: Root Cause Analysis, Threat Modeling
- Teamwork & Collaboration: ทำงานร่วมกับ Dev, Infra, App, Business, Legal
- Continuous Learning: Certifications, CTF, Reading Blogs/Papers, Conferences (Black Hat, DEF CON, RSA, Local)
- Integrity & Ethics: จริยธรรมมืออาชีพ, Confidentiality, Responsible Disclosure
ใบรับรองที่มีค่า (Certifications Roadmap)
| ระดับ | ใบรับรอง | โฟกัส |
|---|
| Entry | CompTIA Security+, (ISC)² CC, Cisco CCST, Fortinet NSE 1-2 | พื้นฐานทั่วไป |
| Associate | Cisco CCNA Security, Fortinet NSE 4, Palo Alto PCCSA, AWS Cloud Practitioner | Vendor/Cloud Specific |
| Professional | CISSP, CCSP, CISM, CISA, OSCP, Palo Alto PCNSE, Fortinet NSE 7, AWS Security Specialty, Azure Security Engineer | มาตรฐานอุตสาหกรรม / Hands-on Expert |
| Expert/Management | CISSP-ISSAP/ISSEP/ISSMP, CISM, CCISO, SABSA, TOGAF | Architecture / Management |
ตลาดงานและเงินเดือน (Thailand Context 2024)
- Junior (0-2 ปี): 35,000 - 60,000 บาท/เดือน (SOC Analyst, Jr Network Security Engineer)
- Mid (3-5 ปี): 70,000 - 130,000 บาท/เดือน (Network Security Engineer, Pentester, Cloud Security Engineer)
- Senior (5-8 ปี): 120,000 - 200,000+ บาท/เดือน (Senior Engineer, Architect, Team Lead)
- Lead/Manager/CISO: 200,000 - 500,000+ บาท/เดือน (ขึ้นกับขนาดองค์กร)
- Remote/International: ได้เงินเดือน USD (3,000 - 15,000+/เดือน) ทำงานจากไทยได้มากขึ้น
แนวโน้มอนาคต (Trends 2024-2025)
- 🔥 Cloud Security (AWS/Azure/GCP) - ขาดแคลนมากที่สุด
- 🔥 Zero Trust / SASE / SSE - แทน VPN แบบเดิม
- 🔥 DevSecOps / AppSec / Supply Chain Security - Shift Left
- 🔥 AI/ML in Security - Threat Detection, Automated Response, LLM Security
- 🔥 OT/ICS Security - Critical Infrastructure Protection
- 🔥 Identity-First Security - IAM, PAM, CIEM, ITDR
เริ่มต้นอย่างไร? (Roadmap สำหรับมือใหม่)
- พื้นฐาน Networking: CompTIA Network+ หรือ Cisco CCNA
- พื้นฐาน Security: CompTIA Security+ (จำเป็น)
- เลือกเส้นทาง:
- 🛡 Blue Team/SOC → SIEM, Log Analysis, Incident Response → CySA+, Splunk Core Certified User
- 🔴 Red Team/Pentest → Web App, Network, AD, Exploit Dev → OSCP, OSWE, OSEP
- ☁ Cloud Security → AWS/Azure/GCP Security Services → AWS Security Specialty, AZ-500, Professional Cloud Security Engineer
- 🏗 Network Security Engineer → Firewall Vendor Certs → Palo Alto PCNSE, Fortinet NSE 7, Check Point CCSE
- สร้าง Portfolio: GitHub, Blog, TryHackMe/Hack The Box Profile, CTF Writeups
- Networking: LinkedIn, Local Community (OWASP Thailand, BKK Security Meetup, Null Bangkok), Conference
