Trách nhiệm chính

• Continuously monitor security alerts and events via SIEM platforms across endpoints, networks, cloud, and identity systems.
• Perform initial triage and validation of alerts to separate true positives from false positives.
• Escalate verified security incidents to Tier 2/3 analysts following established Standard Operating Procedures (SOPs).
• Execute initial investigations, gather digital evidence, and follow incident handling playbooks.
• Assist senior analysts with containment and remediation tasks under direct guidance.
• Identify and flag repetitive false positives to help improve alert accuracy.
• Maintain accurate incident logs, ticketing records, and shift handover reports.
• Review daily dashboards and assist in tracking known Indicators of Compromise (IOCs).
• Provide clear and professional written updates within ticketing systems and internal communications.

Yêu cầu

• Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Network Engineering, or a related field.
• 2-3 years of experience in SOC, IT Security, Network Operations Center (NOC), System Administration, or related technical support roles.
• Good written and verbal English skills.
• Analytical mindset with strong attention to detail and ability to follow standard operating procedures under pressure.

Yêu cầu ưu tiên

• Basic familiarity with major security solutions such as Microsoft Defender, Splunk, CrowdStrike Falcon, or similar EDR/SIEM platforms.
• Basic awareness of frameworks such as MITRE ATT&CK and the NIST Cybersecurity Framework.
• CompTIA Security+, Microsoft SC-200 / AZ-500 (Foundational), BTL1 (Blue Team Level 1) or equivalent entry-level defensive credentials.
• Working knowledge of TCP/IP, DNS, HTTP/HTTPS, Windows Server/Event Logs, and Linux basics.

Phúc lợi

• Competitive salary package.
• Exposure to enterprise-scale infrastructure and real production systems.
• Training and career development toward L3 / System Specialist / Cloud Engineer.
• Full social insurance coverage based on salary.
• Probation with 100% salary.
• Annual bonuses and regular salary reviews.
• Training sponsorship for professional courses and certification exams.
• Comprehensive healthcare coverage for staff and their families.
• Regular health check-ups.
• 15 days of paid annual leave, plus 1 additional day for every 3 years of service, up to 20 days.

Thông tin khác

• Work Locations: Hanoi Office: Room 202, 2nd Floor, HITC Building, 239 Xuan Thuy street, Dich Vong Hau ward, Cau Giay District, Hanoi, Or Gia Lam District (Client’s location).
• 24x7 Security Operations Center environment in the future.
• Shift-based working schedule, including night shifts and weekends based on operational requirements in the future.
• Collaboration with local, regional, and global cybersecurity teams.
• Opportunity to work with enterprise customers across multiple industries.
• Apply today.