Information Security Analyst

The Network Security Analyst is a key member of the global Infrastructure Services team, responsible for supporting and maturing CES's network and information security program across domestic and international locations. This position will be based in our Ho Chi Minh office. This is a growth-oriented role suited to a motivated security professional with a solid foundation, ready to take on broader ownership over time. Working from the HCMC office, you will collaborate closely with a co-located Senior Network Engineer and partner with U.S.-based IT leadership on security priorities, escalations, and strategic initiatives. You will operate within an established security environment, contributing to vulnerability management, incident response, policy governance, and security monitoring, while developing into CES's primary security subject matter expert in the region. Responsibilities Security Monitoring & Incident Response • Oversee security event platforms, leverage EDR tools, and review alerts for anomalous activity, intrusion indicators, and policy violations across Windows and Linux servers to mitigate threats and protect business operations. • Triage and investigate EDR alerts and endpoint detections, escalating confirmed incidents to US-based IT leadership and supporting containment and remediation efforts. • Maintain and execute incident response plans and playbooks; participate in post-incident reviews and contribute to lessons-learned documentation to drive continuous improvement. • Monitor threat intelligence advisories and convert emerging risks into actionable recommendations to help the team proactively reduce security vulnerabilities and protect operations. Vulnerability Management • Leverage vulnerability scanning tools to perform regular assessments across a substantial server fleet running mixed Windows and Linux workloads. • Engage with infrastructure teams to optimize patch management and software deployment workflows, enabling timely remediation of identified vulnerabilities. • Monitor remediation progress and communicate status updates against defined SLAs and risk thresholds. • Facilitate information sharing and response efforts with vendors and third-party partners during vulnerability disclosure exercises to support effective remediation. • Coordinate remediation efforts with both infrastructure and application development teams, translating vulnerability findings into actionable guidance appropriate for each audience and tracking progress through to closure. Security Policy & Governance • Play a vital role in developing, maintaining, and sharing network and data security policies, standards, and procedures aligned with industry frameworks (NIST CSF, CIS Controls, or similar). • Proactively review policies to help maintain relevance and keep ahead of changing regulatory requirements. • Inspire a culture of security awareness across the organization by designing engaging training materials and dynamic internal communications. Network Security Standards • Drive the consistent enforcement of network security standards across firewalls, VPNs, segmentation, and access controls in partnership with the Senior Network Engineer and the US team. • Conduct security reviews for new projects, system changes, and cloud migrations, ensuring guidance aligns with organizational standards. • Embed security practices into DevOps workflows and cloud-based environments (AWS and Azure). Reporting & Documentation • Prepare weekly security reports that summarize monitoring findings, incident activity, vulnerability posture, and remediation progress for IT leadership. • Maintain thorough documentation for security configurations, processes, runbooks, and incident records. • Develop security metrics and KPIs to co