Trách nhiệm chính

• Investigate and validate security alerts escalated from SOC Tier 1 across SIEM, EDR, and network platforms.
• Perform root cause analysis, correlation, and attack chain reconstruction to determine scope and impact.
• Lead containment, eradication, and recovery actions during active incidents following standard frameworks (NIST/SANS).
• Analyze system logs (Windows/Linux), network traffic, and collect digital artifacts for evidence.
• Map attacker techniques using the MITRE ATT&CK framework and analyze Threat Intelligence (IOCs/IOAs).
• Tune SIEM rules, optimize detection content, and reduce false positives to improve alert accuracy.
• Write professional incident reports and technical documentation in English.
• Collaborate with global stakeholders, support customer audits, and mentor Tier 1 analysts.

Yêu cầu

• Bachelor’s Degree in Cybersecurity, IT, Computer Science, or related fields.
• 3 – 5 years of hands‑on experience in a Security Operations Center (SOC) or Incident Response role.
• Proficiency with major SIEM solutions (e.g., Microsoft Sentinel, Splunk) and EDR tools (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint).
• Solid working knowledge of Windows Event Logs, Linux Syslogs, Active Directory, TCP/IP, DNS, and Firewalls.
• Practical understanding of the NIST Incident Response lifecycle and MITRE ATT&CK mapping.
• Basic foundational skills in scripting/query languages (Python, PowerShell, KQL, or SPL) for data parsing and automation.
• Strong verbal and written English communication skills.
• Strong analytical mindset to connect fragmented indicators under pressure in a fast‑paced environment.

Yêu cầu ưu tiên

• Relevant security certifications such as CompTIA CySA+, GCIH, Microsoft SC-200, or equivalent foundational/intermediate security credentials.

Mức lương

• Competitive salary package
• Exposure to enterprise-scale infrastructure and real production systems
• Training and career development toward L3 / System Specialist / Cloud Engineer
• Full social insurance coverage based on salary
• Probation with 100% salary
• Annual bonuses and regular salary reviews
• Training sponsorship for professional courses and certification exams
• Comprehensive healthcare coverage for staff and their families
• Regular health check‑ups
• 15 days of paid annual leave, plus 1 additional day for every 3 years of service, up to 20 days.

Thông tin khác

• Work Environment: 24x7 Security Operations Center environment in the future.
• Shift-based working schedule, including night shifts and weekends based on operational requirements in the future.
• Collaboration with local, regional, and global cybersecurity teams.
• Opportunity to work with enterprise customers across multiple industries.
• Work Locations: Hanoi Office: Room 202, 2nd Floor, HITC Building, 239 Xuan Thuy street, Cau Giay District, Hanoi.