SOC Analyst Tier 2
Hà Nội
Hạn nộp hồ sơ:
22/11/2026
Về công việc
Trách nhiệm chính
- Investigate and validate security alerts escalated from SOC Tier 1 across SIEM, EDR, and network platforms.
- Perform root cause analysis, correlation, and attack chain reconstruction to determine scope and impact.
- Lead containment, eradication, and recovery actions during active incidents following standard frameworks (NIST/SANS).
- Analyze system logs (Windows/Linux), network traffic, and collect digital artifacts for evidence.
- Map attacker techniques using the MITRE ATT&CK framework and analyze Threat Intelligence (IOCs/IOAs).
- Tune SIEM rules, optimize detection content, and reduce false positives to improve alert accuracy.
- Write professional incident reports and technical documentation in English.
- Collaborate with global stakeholders, support customer audits, and mentor Tier 1 analysts.
Yêu cầu
- Bachelor’s Degree in Cybersecurity, IT, Computer Science, or related fields.
- 3 – 5 years of hands‑on experience in a Security Operations Center (SOC) or Incident Response role.
- Proficiency with major SIEM solutions (e.g., Microsoft Sentinel, Splunk) and EDR tools (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint).
- Solid working knowledge of Windows Event Logs, Linux Syslogs, Active Directory, TCP/IP, DNS, and Firewalls.
- Practical understanding of the NIST Incident Response lifecycle and MITRE ATT&CK mapping.
- Basic foundational skills in scripting/query languages (Python, PowerShell, KQL, or SPL) for data parsing and automation.
- Strong verbal and written English communication skills.
- Strong analytical mindset to connect fragmented indicators under pressure in a fast‑paced environment.
Yêu cầu ưu tiên
- Relevant security certifications such as CompTIA CySA+, GCIH, Microsoft SC-200, or equivalent foundational/intermediate security credentials.
Mức lương
- Competitive salary package
- Exposure to enterprise-scale infrastructure and real production systems
- Training and career development toward L3 / System Specialist / Cloud Engineer
- Full social insurance coverage based on salary
- Probation with 100% salary
- Annual bonuses and regular salary reviews
- Training sponsorship for professional courses and certification exams
- Comprehensive healthcare coverage for staff and their families
- Regular health check‑ups
- 15 days of paid annual leave, plus 1 additional day for every 3 years of service, up to 20 days.
Thông tin khác
- Work Environment: 24x7 Security Operations Center environment in the future.
- Shift-based working schedule, including night shifts and weekends based on operational requirements in the future.
- Collaboration with local, regional, and global cybersecurity teams.
- Opportunity to work with enterprise customers across multiple industries.
- Work Locations: Hanoi Office: Room 202, 2nd Floor, HITC Building, 239 Xuan Thuy street, Cau Giay District, Hanoi.
Việc làm liên quan
Thỏa thuận
Khánh Hòa
Thỏa thuận
Khánh Hòa
Thỏa thuận
Khánh Hòa
Thỏa thuận
Khánh Hòa