SOC Analyst Tier 2
Hà Nội
Application deadline:
22/11/2026
About This Job
Trách nhiệm chính
- Investigate and validate security alerts escalated from SOC Tier 1 across SIEM, EDR, and network platforms.
- Perform root cause analysis, correlation, and attack chain reconstruction to determine scope and impact.
- Lead containment, eradication, and recovery actions during active incidents following standard frameworks (NIST/SANS).
- Analyze system logs (Windows/Linux), network traffic, and collect digital artifacts for evidence.
- Map attacker techniques using the MITRE ATT&CK framework and analyze Threat Intelligence (IOCs/IOAs).
- Tune SIEM rules, optimize detection content, and reduce false positives to improve alert accuracy.
- Write professional incident reports and technical documentation in English.
- Collaborate with global stakeholders, support customer audits, and mentor Tier 1 analysts.
Yêu cầu
- Bachelor’s Degree in Cybersecurity, IT, Computer Science, or related fields.
- 3 – 5 years of hands‑on experience in a Security Operations Center (SOC) or Incident Response role.
- Proficiency with major SIEM solutions (e.g., Microsoft Sentinel, Splunk) and EDR tools (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint).
- Solid working knowledge of Windows Event Logs, Linux Syslogs, Active Directory, TCP/IP, DNS, and Firewalls.
- Practical understanding of the NIST Incident Response lifecycle and MITRE ATT&CK mapping.
- Basic foundational skills in scripting/query languages (Python, PowerShell, KQL, or SPL) for data parsing and automation.
- Strong verbal and written English communication skills.
- Strong analytical mindset to connect fragmented indicators under pressure in a fast‑paced environment.
Yêu cầu ưu tiên
- Relevant security certifications such as CompTIA CySA+, GCIH, Microsoft SC-200, or equivalent foundational/intermediate security credentials.
Mức lương
- Competitive salary package
- Exposure to enterprise-scale infrastructure and real production systems
- Training and career development toward L3 / System Specialist / Cloud Engineer
- Full social insurance coverage based on salary
- Probation with 100% salary
- Annual bonuses and regular salary reviews
- Training sponsorship for professional courses and certification exams
- Comprehensive healthcare coverage for staff and their families
- Regular health check‑ups
- 15 days of paid annual leave, plus 1 additional day for every 3 years of service, up to 20 days.
Thông tin khác
- Work Environment: 24x7 Security Operations Center environment in the future.
- Shift-based working schedule, including night shifts and weekends based on operational requirements in the future.
- Collaboration with local, regional, and global cybersecurity teams.
- Opportunity to work with enterprise customers across multiple industries.
- Work Locations: Hanoi Office: Room 202, 2nd Floor, HITC Building, 239 Xuan Thuy street, Cau Giay District, Hanoi.