SOC Analyst Tier 2

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

We are looking for an experienced SOC Analyst Tier 2 to handle escalated security incidents, conduct deep-dive investigations, and drive incident containment. You will act as a bridge between frontline monitoring and advanced threat response, utilizing modern SIEM/EDR platforms to protect our enterprise environments.

Key Responsibilities

Incident Investigation & Triage:

• Investigate and validate security alerts escalated from SOC Tier 1 across SIEM, EDR, and network platforms.
• Perform root cause analysis, correlation, and attack chain reconstruction to determine scope and impact.

Incident Response & Containment:

• Lead containment, eradication, and recovery actions during active incidents following standard frameworks (NIST/SANS).
• Analyze system logs (Windows/Linux), network traffic, and collect digital artifacts for evidence.

Threat Detection & Tuning:

• Map attacker techniques using the MITRE ATT&CK framework and analyze Threat Intelligence (IOCs/IOAs).
• Tune SIEM rules, optimize detection content, and reduce false positives to improve alert accuracy.

Documentation & Collaboration:

• Write professional incident reports and technical documentation in English.
• Collaborate with global stakeholders, support customer audits, and mentor Tier 1 analysts.

Required Qualifications

1. Education & Experience

• Education: Bachelor’s Degree in Cybersecurity, IT, Computer Science, or related fields.
• Experience: 3 - 5 years of hands-on experience in a Security Operations Center (SOC) or Incident Response role.

2. Technical Skills

• Security Platforms: Proficiency with major SIEM solutions (e.g., Microsoft Sentinel, Splunk) and EDR tools (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint).
• OS & Networking: Solid working knowledge of Windows Event Logs, Linux Syslogs, Active Directory, TCP/IP, DNS, and Firewalls.
• Frameworks & Methodologies: Practical understanding of the NIST Incident Response lifecycle and MITRE ATT&CK mapping.
• Scripting & Querying: Basic foundational skills in scripting/query languages (Python, PowerShell, KQL, or SPL) for data parsing and automation.

3. Language & Soft Skills

• English Proficiency: Strong verbal and written English communication skills for international client interaction and technical reporting.
• Problem-Solving: Strong analytical mindset to connect fragmented indicators under pressure in a fast-paced environment.

4. Preferred Certifications

• Relevant security certifications such as: CompTIA CySA+, GCIH, Microsoft SC-200, or equivalent foundational/intermediate security credentials.

Work Environment

• 24x7 Security Operations Center environment in the future.
• Shift-based working schedule, including night shifts and weekends based on operational requirements in the future.
• Collaboration with local, regional, and global cybersecurity teams.
• Opportunity to work with enterprise customers across multiple industries.

Benefits:

• Competitive salary package
• Exposure to enterprise-scale infrastructure and real production systems.
• Training and career development toward L3 / System Specialist / Cloud Engineer.
• Full social insurance coverage based on salary.
• Probation with 100% salary.
• Annual bonuses and regular salary reviews.
• Training sponsorship for professional courses and certification exams.
• Comprehensive healthcare coverage for staff and their families.
• Regular health check-ups.
• 15 days of paid annual leave, plus 1 additional day for every 3 years of service, up to 20 days.

Work Locations:

• Hanoi Office: Room 202, 2nd Floor, HITC Building, 239 Xuan Thuy street, Dich Vong Hau ward, Cau Giay District, Hanoi, Or Gia Lam District (Client’s location)

Workplace type:

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune

Global 100. We are committed to accelerating client success and positively impacting society through

responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with

unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and

application services. Our consulting and industry solutions help organizations and society move

confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more

than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as

established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each

year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.

Third parties fraudulently posing as NTT DATA recruiters

NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.