Your day at NTT DATA
We are looking for an experienced SOC Analyst Tier 2 to handle escalated security incidents, conduct deep-dive investigations, and drive incident containment. You will act as a bridge between frontline monitoring and advanced threat response, utilizing modern SIEM/EDR platforms to protect our enterprise environments.

Key Responsibilities

Incident Investigation & Triage:

• Investigate and validate security alerts escalated from SOC Tier 1 across SIEM, EDR, and network platforms.
• Perform root cause analysis, correlation, and attack chain reconstruction to determine scope and impact.

Incident Response & Containment:

• Lead containment, eradication, and recovery actions during active incidents following standard frameworks (NIST/SANS).
• Analyze system logs (Windows/Linux), network traffic, and collect digital artifacts for evidence.

Threat Detection & Tuning:

• Map attacker techniques using the MITRE ATT&CK framework and analyze Threat Intelligence (IOCs/IOAs).
• Tune SIEM rules, optimize detection content, and reduce false positives to improve alert accuracy.

Documentation & Collaboration:

• Write professional incident reports and technical documentation in English.
• Collaborate with global stakeholders, support customer audits, and mentor Tier 1 analysts.

Required Qualifications

1. Education & Experience

• Education: Bachelor’s Degree in Cybersecurity, IT, Computer Science, or related fields.
• Experience: 3 – 5 years of hands-on experience in a Security Operations Center (SOC) or Incident Response role.

2. Technical Skills

• Security Platforms: Proficiency with major SIEM solutions (e.g., Microsoft Sentinel, Splunk) and EDR tools (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint).
• OS & Networking: Solid working knowledge of Windows Event Logs, Linux Syslogs, Active Directory, TCP/IP, DNS, and Firewalls.
• Frameworks & Methodologies: Practical understanding of the NIST Incident Response lifecycle and MITRE ATT&CK mapping.
• Scripting & Querying: Basic foundational skills in scripting/query languages (Python, PowerShell, KQL, or SPL) for data parsing and automation.

3. Language & Soft Skills

• English Proficiency: Strong verbal and written English communication skills for international client interaction and technical reporting.
• Problem-Solving: Strong analytical mindset to connect fragmented indicators under pressure in a fast-paced environment.

4. Preferred Certifications

• Relevant security certifications such as: CompTIA CySA+, GCIH, Microsoft SC-200, or equivalent foundational/intermediate security credentials.

Work Environment

• 24x7 Security Operations Center environment in the future.
• Shift-based working schedule, including night shifts and weekends based on operational requirements in the future.
• Collaboration with local, regional, and global cybersecurity teams.
• Opportunity to work with enterprise customers across multiple industries.

Benefits:

• Competitive salary package
• Exposure to enterprise-scale infrastructure and real production systems.
• Training and career development toward L3 / System Specialist / Cloud Engineer.
• Full social insurance coverage based on salary.
• Probation with 100% salary.
• Annual bonuses and regular salary reviews.
• Training sponsorship for professional courses and certification exams.
• Comprehensive healthcare coverage for staff and their families.
• Regular health check-ups.
• 15 days of paid annual leave, plus 1 additional day for every 3 years of service, up to 20 days.

Work Locations:

• Hanoi Office: Room 202, 2nd Floor, HITC Building, 239 Xuan Thuy street, Dich Vong Hau ward, Cau Giay District, Hanoi, Or Gia Lam District (Client’s location)

Workplace type:

Equal Opportunity Employer
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Accelerate your career with us. Apply today