Security Operations Center (SOC) - Level 1

About Source Of Asia

Way beyond a simple consulting firm, Source of Asia is an international business accelerator. In simple words, we enable our customers to explore, operate and grow business in Vietnam, across ASEAN, and further afield. We thrive on challenges, permanently motivated to learn and grow along the way. We believe success lies in the human relationships we build. This dynamic environment is the ideal gateway for talents, who believe, like we do, in sustainable growth. Our fast-growing company is permanently looking for new talents.

The following job description pertains to an external position that we are currently hiring for on behalf of our client. Submit your application today!

About our client

A cybersecurity services company providing security monitoring, threat detection, incident response, and remediation for clients, with a focus on helping organizations protect their IT environments.

The Level 1 SOC Analyst will monitor security alerts, investigate potential threats, and escalate confirmed incidents to L2/L3 analysts. This role offers a great opportunity to start or develop a career in cybersecurity, with hands-on experience using EDR, SIEM/XDR, SOAR, and NDR tools while working alongside experienced team members.

Shift Schedule – 3 Shifts:

• Weekdays: Mainly night shifts
• Weekends: Morning, afternoon, and night shifts

Key Responsibilities

• Monitor security alerts generated by SIEM/XDR, EDR, and NDR platforms across multiple client environments
• Perform first-level triage and qualification of security events (true positive / false positive)
• Use SOAR playbooks to automate enrichment, containment, and response actions on validated incidents
• Investigate endpoint alerts using EDR consoles (e.g., SentinelOne), analyzing processes, network connections, and behavioral indicators
• Correlate events across log sources, network traffic, and endpoint telemetry to assess severity and scope
• Escalate confirmed or ambiguous incidents to L2/L3 analysts with clear, structured documentation
• Open, update, and track tickets in the incident management/ticketing tool according to SOC procedures
• Contribute to and follow documented runbooks and detection use cases
• Communicate incident status clearly to internal teams and, where relevant, to clients
• Participate in a shift rotation (including nights, weekends, and public holidays as applicable)
• Continuously build knowledge of current threats, attacker techniques (MITRE ATT&CK), and detection best practices

Requirements

• Degree or ongoing studies in Cybersecurity, Networking, or Computer Science, with 2+ years of relevant experience.
• Solid networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls), basic Windows/Linux knowledge, and awareness of common attack techniques.
• Understanding of SIEM, XDR, EDR, SOAR, IDS/IPS, with the ability to analyze logs and alerts accurately under pressure.
• Strong attention to detail, analytical mindset, good English communication, teamwork, and willingness to work rotating shifts.
• Strong written and verbal communication skills in both Vietnamese and English languages.
• Hands-on experience with SIEM/XDR/EDR/SOAR tools (e.g., Sekoia, SentinelOne) is a plus
• Security certifications/coursework such as Security+, eJPT, or equivalent are a plus.
• Basic scripting skills in Python, PowerShell, or Bash, and knowledge of MITRE ATT&CK, NDR, or PAM concepts are a plus.

Benefits

• Competitive salary package commensurate with experience and qualifications.
• Opportunities for professional growth and development within a dynamic team environment.
• Access to cutting-edge tools and software to support job responsibilities.
• Other employee benefits follow company policies.

Apply here: https://careers.sourceofasia.com/en/jobs/security-operations-center-soc--XB6ah4jAFKaofMA8.htmlsource=LinkedIn