{"id":3224433,"url":"https://alion.io/job/ntt-soc-analyst-tier-2","title":"SOC Analyst Tier 2","company":{"id":121,"name":"NTT","domain":"global.ntt","url":"https://alion.io/company/ntt","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":239,"ghost_share":0,"stale_share":0.962,"repost_share":0.004,"time_to_fill_p50_days":22,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hanoi, Vietnam"],"countries":["VN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14000,"max_usd":34000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-23T00:00:00Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-29T00:37:16Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Make an impact with NTT DATA\nJoin a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it’s a place where you can grow, belong and thrive.\nYour day at NTT DATA\nWe are looking for an experienced SOC Analyst Tier 2 to handle escalated security incidents, conduct deep-dive investigations, and drive incident containment. You will act as a bridge between frontline monitoring and advanced threat response, utilizing modern SIEM/EDR platforms to protect our enterprise environments.\nKey Responsibilities\nIncident Investigation & Triage:\nInvestigate and validate security alerts escalated from SOC Tier 1 across SIEM, EDR, and network platforms.\nPerform root cause analysis, correlation, and attack chain reconstruction to determine scope and impact.\nIncident Response & Containment:\nLead containment, eradication, and recovery actions during active incidents following standard frameworks (NIST/SANS).\nAnalyze system logs (Windows/Linux), network traffic, and collect digital artifacts for evidence.\nThreat Detection & Tuning:\nMap attacker techniques using the MITRE ATT&CK framework and analyze Threat Intelligence (IOCs/IOAs).\nTune SIEM rules, optimize detection content, and reduce false positives to improve alert accuracy.\nDocumentation & Collaboration:\nWrite professional incident reports and technical documentation in English.\nCollaborate with global stakeholders, support customer audits, and mentor Tier 1 analysts.\nRequired Qualifications\n1. Education & Experience\nEducation: Bachelor’s Degree in Cybersecurity, IT, Computer Science, or related fields.\nExperience: 3 - 5 years of hands-on experience in a Security Operations Center (SOC) or Incident Response role.\n2. Technical Skills\n Security Platforms: Proficiency with major SIEM solutions (e.g., Microsoft Sentinel, Splunk) and EDR tools (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint).\nOS & Networking: Solid working knowledge of Windows Event Logs, Linux Syslogs, Active Directory, TCP/IP, DNS, and Firewalls.\nFrameworks & Methodologies: Practical understanding of the NIST Incident Response lifecycle and MITRE ATT&CK mapping.\n Scripting & Querying: Basic foundational skills in scripting/query languages (Python, PowerShell, KQL, or SPL) for data parsing and automation.\n3. Language & Soft Skills\nEnglish Proficiency: Strong verbal and written English communication skills for international client interaction and technical reporting.\nProblem-Solving: Strong analytical mindset to connect fragmented indicators under pressure in a fast-paced environment.\n4. Preferred Certifications\nRelevant security certifications such as: CompTIA CySA+, GCIH, Microsoft SC-200, or equivalent foundational/intermediate security credentials.\nWork Environment\n24x7 Security Operations Center environment in the future.\nShift-based working schedule, including night shifts and weekends based on operational requirements in the future.\nCollaboration with local, regional, and global cybersecurity teams.\nOpportunity to work with enterprise customers across multiple industries.\nBenefits:\nCompetitive salary package\nExposure to enterprise-scale infrastructure and real production systems.\nTraining and career development toward L3 / System Specialist / Cloud Engineer.\nFull social insurance coverage based on salary.\nProbation with 100% salary.\nAnnual bonuses and regular salary reviews.\nTraining sponsorship for professional courses and certification exams.\nComprehensive healthcare coverage for staff and their families.\nRegular health check-ups.\n15 days of paid annual leave, plus 1 additional day for every 3 years of service, up to 20 days.\nWork Locations:\n Hanoi Office: Room 202, 2nd Floor, HITC Building, 239 Xuan Thuy street, Dich Vong Hau ward, Cau Giay District, Hanoi, Or Gia Lam District (Client’s location)\nWorkplace type:\nAbout NTT DATA\nNTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune\nGlobal 100. We are committed to accelerating client success and positively impacting society through\nresponsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with\nunmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and\napplication services. Our consulting and industry solutions help organizations and society move\nconfidently and sustainably into the digital future. As a Global Top Employer, we have experts in more\nthan 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as\nestablished and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each\nyear in R&D.\nEqual Opportunity Employer\nNTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.\nThird parties fraudulently posing as NTT DATA recruiters\nNTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.","description_format":"text","description_chars":5835,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Annual bonuses","Annual leave","Insurance coverage"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Data Centers & Colocation","IT Consulting & Digital Transformation","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-25T04:50:42Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":5,"expected_fill_days":22,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/ntt-soc-analyst-tier-2","json_url":"https://alion.io/job/ntt-soc-analyst-tier-2.json","meta":{"generated_at":"2026-10-29T04:07:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6314,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":121},"rest":"https://alion.io/mcp/rest/get_company?id=121"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fntt-soc-analyst-tier-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fntt-soc-analyst-tier-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fntt-soc-analyst-tier-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ntt-soc-analyst-tier-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fntt-soc-analyst-tier-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3224433}},{"tool":"search_jobs","arguments":{"company":"global.ntt","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3224433},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}