Information Security · Bangkok, Thailand

Sophon Kururat

Security Consultant Manager at G-Able

Over 20 years in IT and information security consulting. I design and implement network security, host security and security solutions for IT infrastructure, and lead security analytics, incident response and SIEM projects from use-case design through to implementation.

20+years in IT & information security
1995started as a system engineer
7enterprise & government clients
10vendor certifications

Expertise

Leading security solution delivery end to end: consultation, design, installation, tuning and incident resolution.

Network security

Design and implementation of firewalls, intrusion detection and intrusion prevention systems.

SIEM & security analytics

Log management and SIEM platforms, including use-case design and implementation.

Incident response

Threat monitoring, incident handling and resolution, with SOAR and threat intelligence tooling.

Host & endpoint security

Endpoint threat protection, endpoint management and vulnerability assessment.

Security architecture

Security design and configuration across every component of a proposed solution.

Delivery leadership

Coordinating customer teams, implementation teams and vendors to keep solutions consistent.

Technologies

  • ArcSight ESM
  • ArcSight Logger
  • Symantec ESM
  • Splunk
  • McAfee IPS / IntruShield
  • McAfee ePO
  • McAfee Foundstone
  • McAfee Endpoint
  • FireEye
  • Check Point
  • StoneGate
  • ISS RealSecure
  • ISS Internet Scanner
  • ThreatQuotient
  • CyberSponse SOAR
  • Solaris

Selected engagements

Consultation, installation, optimisation and security of Internet-facing and internal networks for organisations in banking, capital markets, government and industry.

Banking

Bangkok Bank PCL

Security design for all proposed security components, implementation, and coordination between the bank's operations staff, the implementation team and product suppliers.

  • Firewall
  • Intrusion detection
Banking

Kasikorn Bank

Security design, endpoint threat protection design and planning, and resolution of endpoint threat incidents together with the vendor.

  • Firewall
  • IPS
  • Endpoint protection
Banking

CIMB Thai PCL

Security design and implementation of network security and SIEM, threat monitoring across security devices, incident alerting and resolution.

  • Firewall
  • IPS
  • Vulnerability management
  • Log management
  • SIEM
Banking

United Overseas Bank (Thai)

Design and implementation of security information and event management, and resolution of incidents raised from the platform.

  • SIEM
  • Log management
Capital markets

The Stock Exchange of Thailand

Security design and configuration of the proposed network security components.

  • IPS
  • Firewall
Government

Ministry of Foreign Affairs

Security design and configuration of the proposed network security components.

  • IPS
  • Firewall
Industry

Siam United Steel

Security design and configuration of the proposed security components.

  • Vulnerability scanning
  • Firewall

Career

Three decades from system engineering into security consulting and leadership.

  1. 2010 — Present

    Security Consultant Manager

    G-Able Company Limited
  2. 2003 — 2010

    Senior Technical Specialist

    G-Able Company Limited
  3. 2001 — 2003

    Senior Internet Security Consultant

    Logic Company Limited
  4. 1999 — 2001

    Internet Security Consultant

    Logic Company Limited
  5. 1997 — 1999

    Senior System Engineer

    Logic Company Limited
  6. 1996 — 1997

    System Engineer

    Logic Company Limited
  7. 1995 — 1996

    System Engineer

    Rolm Apllo (Thailand) Company Limited

Credentials

Certifications, training and education.

Certifications

  • Check Point Certified Security Administrator (CCSA)
  • Certified StoneGate Architect (CSGA)StoneSoft Corporation
  • Certified StoneGate Engineer (CSGE)StoneSoft Corporation
  • ArcSight Certified Security Analysis
  • ArcSight Certified Installation Administrative
  • FireEye Field Engineer
  • ISS RealSecure CertifiedInternet Security Systems, Inc.
  • ISS System Scanner CertifiedInternet Security Systems, Inc.
  • ISS Internet Scanner Certified
  • ISS Database Scanner Certified

Training

  • Splunk User Fundamentals
  • CyberSponse SOAR Platform
  • ThreatQuotient User Fundamentals
  • FireEye Field Engineer Course
  • ArcSight Certified Partner Training
  • Solaris 8 Operating Environment System Administrator I & II
  • Solaris Operating Environment TCP/IP Network Administrator
  • Database Design
  • UML Notation
  • Basic Java Programming

Education

  • Bachelor of Engineering in ElectronicsKing Mongkut's University of Technology Ladkrabang · 1994 – 1995
  • Diploma in ElectronicsRajamangala University of Technology, North Bangkok Campus · 1992 – 1994

Contact

For security consulting, solution design or project enquiries.

sophon.ku@gmail.com