Your day at NTT DATA
We are looking for an energetic and analytical SOC Analyst Tier 1 to join our Security Operations Center. In this role, you will act as the frontline defense, monitoring security events, triaging alerts, and executing initial response procedures to protect our enterprise environment. This is an ideal opportunity for ambitious professionals or strong fresh graduates looking to kickstart their cybersecurity career.
A/ Key Responsibilities
Security Monitoring & Incident Triage:
Continuously monitor security alerts and events via SIEM platforms across endpoints, networks, cloud, and identity systems.
Perform initial triage and validation of alerts to separate true positives from false positives.
Escalate verified security incidents to Tier 2/3 analysts following established Standard Operating Procedures (SOPs).
Incident Response Support:
Execute initial investigations, gather digital evidence, and follow incident handling playbooks.
Assist senior analysts with containment and remediation tasks under direct guidance.
Identify and flag repetitive false positives to help improve alert accuracy.
Operations & Documentation:
Maintain accurate incident logs, ticketing records, and shift handover reports.
Review daily dashboards and assist in tracking known Indicators of Compromise (IOCs).
Provide clear and professional written updates within ticketing systems and internal communications.
B/Required Qualifications
1. Education & Experience
Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Network Engineering, or a related field.
2-3 years of experience in SOC, IT Security, Network Operations Center (NOC), System Administration, or related technical support roles is preferred.
2. Core Technical Skills
Security Fundamentals: Solid understanding of cybersecurity core concepts, the Incident Response lifecycle, and network security.
Networking & OS: Working knowledge of TCP/IP, DNS, HTTP/HTTPS, Windows Server/Event Logs, and Linux basics.
Security Tools: Basic familiarity with major security solutions (e.g., Microsoft Defender, Splunk, CrowdStrike Falcon, or similar EDR/SIEM platforms).
Frameworks (Nice to Have): Basic awareness of frameworks such as MITRE ATT&CK and the NIST Cybersecurity Framework.
3. Language & Soft Skills
English Good: Good written and verbal English skills; comfortable writing ticket notes, incident summaries, and participating in internal syncs.
Analytical Mindset: Eagerness to learn, strong attention to detail, and ability to follow standard operating procedures under pressure.
4. Preferred Certifications
CompTIA Security+
Microsoft SC-200 / AZ-500 (Foundational)
BTL1 (Blue Team Level 1) or equivalent entry-level defensive credentials.
Work Environment
24x7 Security Operations Center environment in the future.
Shift-based working schedule, including night shifts and weekends based on operational requirements in the future.
Collaboration with local, regional, and global cybersecurity teams.
Opportunity to work with enterprise customers across multiple industries.
Benefits:
Competitive salary package
Exposure to enterprise-scale infrastructure and real production systems.
Training and career development toward L3 / System Specialist / Cloud Engineer.
Full social insurance coverage based on salary.
Probation with 100% salary.
Annual bonuses and regular salary reviews.
Training sponsorship for professional courses and certification exams.
Comprehensive healthcare coverage for staff and their families.
Regular health check-ups.
15 days of paid annual leave, plus 1 additional day for every 3 years of service, up to 20 days.
Work Locations:
Hanoi Office: Gia Lam District (Client's location)
Thông tin chung