Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

NTT DATA Vietnam is seeking a motivated and detail-oriented SOC Engineer L1 to join our Security Operations Center (SOC) team in Hanoi.

As a Level 1 SOC Engineer, you will be the first line of defense in monitoring and detecting cybersecurity threats across customer environments. You will be responsible for security event monitoring, alert triage, incident identification, initial investigation, and escalation of security incidents to higher-level analysts.

This role is ideal for cybersecurity professionals who possess strong analytical capabilities, a security mindset, and excellent English communication skills to support international customers and global teams.

Key Responsibilities

• Security Monitoring & Incident Detection
  • Continuously monitor security events and alerts through Security Information and Event Management (SIEM) platforms.
  • Analyze and triage security alerts to identify potential security incidents.
  • Monitor endpoint, network, cloud, email, and identity-related security events.
  • Escalate suspicious activities and confirmed incidents to L2/L3 SOC Analysts in accordance with incident response procedures.
  • Document findings and maintain accurate incident records.
• Incident Response Support
  • Perform initial investigation and analysis of security incidents.
  • Gather and preserve evidence for further analysis.
  • Conduct preliminary root cause identification.
  • Support containment and remediation activities under the guidance of senior analysts.
  • Follow incident handling playbooks and Standard Operating Procedures (SOPs).
• Threat Monitoring
  • Monitor indicators of compromise (IOCs), indicators of attack (IOAs), and emerging cyber threats.
  • Identify anomalous activities across customer environments.
  • Assist in identifying phishing, malware, ransomware, unauthorized access, and suspicious user activities.
• Security Operations
  • Review daily security reports and alert dashboards.
  • Perform routine security checks and health monitoring of security tools.
  • Support use case tuning and alert validation activities.
  • Ensure timely handling of assigned tickets and incidents according to SLA requirements.
• Documentation & Reporting
  • Create and maintain incident records within ticketing systems.
  • Prepare incident summaries and shift handover reports.
  • Maintain knowledge base articles and operational documentation.
  • Provide clear written and verbal communication to customers and internal stakeholders.

Required Qualifications

Education

Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Technology, Network Engineering, or a related field. Fresh graduates with strong cybersecurity knowledge are encouraged to apply.

2-3 years of experience in SOC, IT Security, Network Operations Center (NOC), System Administration, or related technical support roles is preferred.

Technical Skills

Security Knowledge

Good understanding of:

• Cybersecurity fundamentals
• Security monitoring and incident response processes
• Network security concepts
• TCP/IP, DNS, DHCP, HTTP/HTTPS
• Authentication and identity management concepts
• Common cyber threats and attack techniques

Security Tools

Basic hands-on experience with one or more of the following:

• Microsoft Sentinel
• Splunk
• IBM QRadar
• ArcSight
• CrowdStrike Falcon
• Microsoft Defender
• Trend Micro
• Palo Alto Cortex XDR
• SentinelOne
• EDR/XDR technologies

Infrastructure Knowledge

Basic understanding of:

• Windows Server
• Linux Operating Systems
• Active Directory
• Microsoft 365
• Azure Cloud
• AWS Cloud fundamentals
• Firewalls and VPN technologies

Frameworks & Standards

Familiarity with:

• MITRE ATT&CK Framework
• NIST Cybersecurity Framework
• Cyber Kill Chain
• ISO 27001
• Security Operations best practices

Language Requirements

English Communication (Mandatory)

Strong English communication skills, both written and verbal. Ability to communicate effectively with international customers and global teams. Ability to write incident reports, security findings, and technical documentation in English. Comfortable participating in customer calls, incident bridges, and technical discussions conducted in English.

Vietnamese

Native or professional working proficiency.

Work Environment

24x7 Security Operations Center environment in the future. Shift-based working schedule, including night shifts and weekends based on operational requirements in the future. Collaboration with local, regional, and global cybersecurity teams. Opportunity to work with enterprise customers across multiple industries.

Benefits:

• Competitive salary package
• Exposure to enterprise-scale infrastructure and real production systems.
• Training and career development toward L3 / System Specialist / Cloud Engineer.
• Full social insurance coverage based on salary.
• Probation with 100% salary.
• Annual bonuses and regular salary reviews.
• Training sponsorship for professional courses and certification exams.
• Comprehensive healthcare coverage for staff and their families.
• Regular health check-ups.
• 15 days of paid annual leave, plus 1 additional day for every 3 years of service, up to 20 days.

Work Locations:

Hanoi Office: Room 202, 2nd Floor, HITC Building, 239 Xuan Thuy street, Dich Vong Hau ward, Cau Giay District, Hanoi, Or Gia Lam District (Client’s location)

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.

Third parties fraudulently posing as NTT DATA recruiters

NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.