Security Operations Center (SOC)

Hồ Chí Minh
About Source Of Asia
Way beyond a simple consulting firm, Source of Asia is an international business accelerator. In simple words, we enable our customers to explore, operate and grow business in Vietnam, across ASEAN, and further afield. We thrive on challenges, permanently motivated to learn and grow along the way. We believe success lies in the human relationships we build. This dynamic environment is the ideal gateway for talents, who believe, like we do, in sustainable growth. Our fast-growing company is permanently looking for new talents.
The following job description pertains to an external position that we are currently hiring for on behalf of our client. Submit your application today!
Mô tả công việc
About our client
A cybersecurity services company providing security monitoring, threat detection, incident response, and remediation for clients, with a focus on helping organizations protect their IT environments.
The Level 1 SOC Analyst will monitor security alerts, investigate potential threats, and escalate confirmed incidents to L2/L3 analysts. This role offers a great opportunity to start or develop a career in cybersecurity, with hands-on experience using EDR, SIEM/XDR, SOAR, and NDR tools while working alongside experienced team members.
Shift Schedule - 3 Shifts:
Weekdays: Mainly night shifts
Weekends: Morning, afternoon, and night shifts
Key Responsibilities
Monitor security alerts generated by SIEM/XDR, EDR, and NDR platforms across multiple client environments
Perform first-level triage and qualification of security events (true positive / false positive)
Use SOAR playbooks to automate enrichment, containment, and response actions on validated incidents
Investigate endpoint alerts using EDR consoles (e.g., SentinelOne), analyzing processes, network connections, and behavioral indicators
Correlate events across log sources, network traffic, and endpoint telemetry to assess severity and scope
Escalate confirmed or ambiguous incidents to L2/L3 analysts with clear, structured documentation
Open, update, and track tickets in the incident management/ticketing tool according to SOC procedures
Contribute to and follow documented runbooks and detection use cases
Communicate incident status clearly to internal teams and, where relevant, to clients
Participate in a shift rotation (including nights, weekends, and public holidays as applicable)
Continuously build knowledge of current threats, attacker techniques (MITRE ATT&CK), and detection best practices
Yêu cầu công việc
Degree or ongoing studies in Cybersecurity, Networking, or Computer Science, with 2+ years of relevant experience.
Solid networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls), basic Windows/Linux knowledge, and awareness of common attack techniques.
Understanding of SIEM, XDR, EDR, SOAR, IDS/IPS, with the ability to analyze logs and alerts accurately under pressure.
Strong attention to detail, analytical mindset, good English communication, teamwork, and willingness to work rotating shifts.
Strong written and verbal communication skills in both Vietnamese and English languages.
Hands-on experience with SIEM/XDR/EDR/SOAR tools (e.g., Sekoia, SentinelOne) is a plus
Security certifications/coursework such as Security+, eJPT, or equivalent are a plus.
Basic scripting skills in Python, PowerShell, or Bash, and knowledge of MITRE ATT&CK, NDR, or PAM concepts are a plus.
Quyền lợi
Competitive salary package commensurate with experience and qualifications.
Opportunities for professional growth and development within a dynamic team environment.
Access to cutting-edge tools and software to support job responsibilities.
Other employee benefits follow company policies.
Quan tâm đến vị trí này?
Nhấp vào nút bên dưới để ứng tuyển trực tiếp. Nếu bạn có bất kỳ câu hỏi nào về vị trí này, vui lòng liên hệ với chúng tôi tại [protected info]