Company Description
Source of Asia (SOA) is an international business accelerator with offices in Ho Chi Minh City and Paris, helping organizations expand across Vietnam, ASEAN, South Korea, and other Asian markets. For over 20 years, SOA has supported corporations and entrepreneurs in exporting products and services, optimizing supply chains, and setting up local operations. The company combines deep local insight with hands-on execution to guide clients from market entry to long-term growth. With a team of 85+ Vietnamese and international experts and strong partnerships with business networks such as Globallians and OSCI, SOA provides a robust platform for strategic, sustainable growth in Asia.
About our client
A cybersecurity services company providing security monitoring, threat detection, incident response, and remediation for clients, with a focus on helping organizations protect their IT environments.
The Level 1 SOC Analyst will monitor security alerts, investigate potential threats, and escalate confirmed incidents to L2/L3 analysts. This role offers a great opportunity to start or develop a career in cybersecurity, with hands-on experience using EDR, SIEM/XDR, SOAR, and NDR tools while working alongside experienced team members.
Shift Schedule – 3 Shifts:
- Weekdays: Mainly night shifts
- Weekends: Morning, afternoon, and night shifts
Key Responsibilities
- Monitor security alerts generated by SIEM/XDR, EDR, and NDR platforms across multiple client environments
- Perform first-level triage and qualification of security events (true positive / false positive)
- Use SOAR playbooks to automate enrichment, containment, and response actions on validated incidents
- Investigate endpoint alerts using EDR consoles (e.g., SentinelOne), analyzing processes, network connections, and behavioral indicators
- Correlate events across log sources, network traffic, and endpoint telemetry to assess severity and scope
- Escalate confirmed or ambiguous incidents to L2/L3 analysts with clear, structured documentation
- Open, update, and track tickets in the incident management/ticketing tool according to SOC procedures
- Contribute to and follow documented runbooks and detection use cases
- Communicate incident status clearly to internal teams and, where relevant, to clients
- Participate in a shift rotation (including nights, weekends, and public holidays as applicable)
- Continuously build knowledge of current threats, attacker techniques (MITRE ATT&CK), and detection best practices
Requirements
- Degree or ongoing studies in Cybersecurity, Networking, or Computer Science, with 2+ years of relevant experience.
- Solid networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls), basic Windows/Linux knowledge, and awareness of common attack techniques.
- Understanding of SIEM, XDR, EDR, SOAR, IDS/IPS, with the ability to analyze logs and alerts accurately under pressure.
- Strong attention to detail, analytical mindset, good English communication, teamwork, and willingness to work rotating shifts.
- Strong written and verbal communication skills in both Vietnamese and English languages.
- Hands-on experience with SIEM/XDR/EDR/SOAR tools (e.g., Sekoia, SentinelOne) is a plus
- Security certifications/coursework such as Security+, eJPT, or equivalent are a plus.
- Basic scripting skills in Python, PowerShell, or Bash, and knowledge of MITRE ATT&CK, NDR, or PAM concepts are a plus.
Benefits
- Competitive salary package commensurate with experience and qualifications.
- Opportunities for professional growth and development within a dynamic team environment.
- Access to cutting-edge tools and software to support job responsibilities.
- Other employee benefits follow company policies.
Apply here: https://careers.sourceofasia.com/en/jobs/security-operations-center-soc--XB6ah4jAFKaofMA8.htmlsource=LinkedIn
