Senior Cybersecurity Analyst - Incident Response

Location: Sala Residential Area, HCM

RESPONSIBILITIES

• Review and investigate security alerts passed on from SOC Level 1 to determine which incidents are genuine and which are false positives.
• Propose or directly execute containment, eradication, and recovery steps for verified security incidents.
• Enhance detection capabilities by refining rules, correlation logic, and alerting mechanisms to reduce noise and improve accuracy.
• Manage and update exclusion lists for recurring activities that have been validated as safe.
• Provide guidance and on-the-job support to SOC Level 1 analysts to help strengthen their technical skills.
• Carry out in-depth investigations to identify attack vectors, root causes, and the potential impact of incidents.
• Participate in incident response procedures and contribute insights to help improve existing playbooks.
• Work closely with IT and security teams to ensure fast and effective handling of emerging threats.

REQUIREMENTS

• At least 2 years of experience in a SOC roles.
• Understanding of threat analysis, malware behaviors, and adversary techniques (e.g., MITRE ATT&CK).
• Practical experience with SIEM tools and supporting security technologies (EDR, IDS/IPS, firewalls, etc.)
• Ability to interpret log data from multiple sources such as network devices, endpoints, and applications.
• Experience in adjusting rules and refining detection logic to enhance alert quality.
• Good foundational knowledge of protocols like TCP/IP, DNS, HTTP, and other core network technologies.
• Strong communication abilities with a proactive approach to coaching junior analysts.

BENEFITS

• 100% sponsorship for relevant technical certificates
• Full salary during the probation
• Premium healthcare insurance for employees
• Free parking, coffee, and tea

📌 Send your CV to: [email protected]

📌 Zalo: 0948828215

Feel free to ping me if you want more details