Security Operations Center (SOC)

Way beyond a simple consulting firm, Source of Asia is an international business accelerator. In simple words, we enable our customers to explore, operate and grow business in Vietnam, across ASEAN, and further afield. We thrive on challenges, permanently motivated to learn and grow along the way. We believe success lies in the human relationships we build. This dynamic environment is the ideal gateway for talents, who believe, like we do, in sustainable growth. Our fast-growing company is permanently looking for new talents.

The following job description pertains to an external position that we are currently hiring for on behalf of our client. Submit your application today!

About our client

We are a cybersecurity services company providing 24/7 SOC monitoring, threat detection, incident management, and remediation for clients. We are looking for a Level 1 SOC Analyst to monitor security alerts in real time, triage and investigate potential threats, and escalate confirmed incidents to L2/L3 analysts. This role is a great entry point into cybersecurity, offering hands-on experience with EDR, SIEM/XDR, SOAR, and NDR platforms while working alongside experienced mentors.

Key Responsibilities 

• Monitor security alerts generated by SIEM/XDR, EDR, and NDR platforms across multiple client environments 
• Perform first-level triage and qualification of security events (true positive / false positive) 
• Use SOAR playbooks to automate enrichment, containment, and response actions on validated incidents 
• Investigate endpoint alerts using EDR consoles (e.g., SentinelOne), analyzing processes, network connections, and behavioral indicators 
• Correlate events across log sources, network traffic, and endpoint telemetry to assess severity and scope 
• Escalate confirmed or ambiguous incidents to L2/L3 analysts with clear, structured documentation 
• Open, update, and track tickets in the incident management/ticketing tool according to SOC procedures 
• Contribute to and follow documented runbooks and detection use cases 
• Communicate incident status clearly to internal teams and, where relevant, to clients 
• Participate in a shift rotation (including nights, weekends, and public holidays as applicable) 
• Continuously build knowledge of current threats, attacker techniques (MITRE ATT&CK), and detection best practices 

• Degree or ongoing studies in Cybersecurity, Networking, or Computer Science (Bac+2 to Bac+5 / equivalent), or equivalent hands-on experience.
• Solid understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, firewalling concepts).
• Basic understanding of operating systems (Windows and Linux) and common attack techniques.
• Familiarity with security monitoring concepts: SIEM, XDR, EDR, SOAR, IDS/IPS.
• Ability to analyze logs and alerts methodically under time pressure.
• Strong attention to detail, rigor, and a genuine interest in threat detection.
• Good written and verbal communication skills in English.
• Team spirit and willingness to work in a rotating shift environment.
• Eagerness to learn and grow toward L2/L3 SOC roles.

Nice to Have

• Prior internship or hands-on experience with a SIEM/XDR platform (e.g., Sekoia), an EDR solution (e.g., SentinelOne), or a SOAR tool.
• Security certifications or coursework (e.g., Security+, eJPT, or equivalent).
• Familiarity with scripting (Python, PowerShell, or Bash) for basic automation and log analysis.
• Knowledge of the MITRE ATT&CK framework.
• Exposure to network detection and response (NDR) or privileged access management (PAM) concepts.

• Competitive salary package commensurate with experience and qualifications.
• Opportunities for professional growth and development within a dynamic team environment.
• Access to cutting-edge tools and software to support job responsibilities.
• Other employee benefits follow company policies.