Cyber Incident Responder

Overview

Viettel Cyber Security One Member Limited Liability Company (VCS) focuses on the implementation, research, and in-depth development of information security products and solutions, while also providing cybersecurity (CS) products and services to large domestic and international organizations and enterprises.

Some notable achievements of VCS:

• The Champion of Pwn2Own 2023 & 2024. Previously, VCS consistently ranked in the Top Five positions at Pwn2Own Tokyo 2020, Vancouver 2021, and Toronto 2022.
• In addition to Pwn2Own, VCS has consistently made its mark and topped numerous prestigious cybersecurity attack rankings and competitions worldwide, including those held by Microsoft, Bugcrowd, Google, Oracle, and others.
• VCS has exploited over 400 Zero-day security vulnerabilities on major platforms and systems of Microsoft, Oracle, Jenkins, and others.
• Received 11 awards at the Cybersecurity Excellence Awards 2023, surpassing more than 800 nominations from leading global cybersecurity solution providers.
• Global InfoSec Awards 2023 (Cyber Defense Magazine)
• IT World Awards 2023: https://globeeawards.com/technology/winners/
• Viettel Cyber Security excelled in achieving the Gold award in the Best Cyber Security Company in Asia category for 2023.
• 07 Gold awards for products: Network Security Monitoring Solution (VCS-CyM), Abnormal Behavior Analysis Solution (VCS-KIAN), Network Security Orchestration, Automation and Response Solution (VCS-CyCir), Endpoint Anomaly Detection Solution (VCS-aJiant), Secure Remote Working Solution for Enterprises (VCS M-Suite); Cyber Threat Intelligence Solution (VCS-Threat Intelligence); Network Security Vulnerability Management and Control Solution (VCS-V2S).
• 03 Gold award for services: Managed Security Services (MSS), Penetration Testing Service (Pentest), IoT Security Assessment Service.

About Security Operation Center is responsible for monitoring and handling information security issues to detect, analyze, respond to, prevent, and investigate security incidents, ensuring cybersecurity for an organization. The SOC currently manages and provides services to nearly 100 clients, including government ministries and agencies, and multi-industry organizations and enterprises both domestically and internationally.

Responsibilities

• Job Description:

– Investigate, analyze, and respond to cybersecurity incidents occurring on the organization’s IT infrastructure.

– Identify specific vulnerabilities and weaknesses and provide recommendations for quick and thorough remediation.

– Hunt across the entire system, identifying compromised components based on the TTPs (Techniques, Tactics, Procedures) of attack groups.

– Conduct in-depth analysis of hacker tools used in attacks (Malware, Webshell, Hacktool, etc.).

Qualifications

• Educational Background:

– Bachelor’s degree in: Information Security; Information Technology, Computer Science, Mathematics-Informatics…

– English proficiency equivalent to TOEIC 650 or higher

• Requirements/Competencies:

– Knowledge and methods for incident response and handling

– Knowledge of intrusion detection methods and techniques to identify intrusion attacks based on the host and network layers

– Knowledge of cyber attack phases (e.g., reconnaissance, scanning, enumeration, gaining access, privilege escalation, maintaining access, covering tracks…)

– Ability to recognize and differentiate between various types of vulnerabilities and related attacks

– Knowledge of application security risks (e.g., OWASP Top 10)

– Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, malware, XSS, SQLi, Injection, hijacking…)

– Knowledge of malware analysis methods

• Preferred

– Participation in Malware Reverse Engineering/Web Security courses.

– Certifications such as CEH, OSCP, GREM, GCTI…

• Soft Skills

– Good teamwork skills and ability to work well under pressure

– Information seeking skills

– Compliance with discipline, punctuality, and level of commitment

Benefits & perks

• Competitive annual total income package
• Opportunity to work with diverse domestic and international clients
• Annual salary review in March

• MIC health and personal accident insurance (coverage up to 600 million VND/year)
• Annual health check-up

• Awards recognizing performance and timely outstanding contributions
• 100% sponsorship for in-depth international professional certification based on position (in case of unsuccessful attempt, don’t worry, VCS will support 50% of the exam fee), special bonuses for employees achieving international professional certifications
• Continuous investment in the latest and most up-to-date learning materials in the field of Information Security from leading global vendors and institutes
• 100% of employees are provided with an Udemy eLearning account – learn anytime, anywhere
• Free participation in professional knowledge sharing programs and seminars from leading domestic and international speakers

• Working in a Grade A office – Landmark 72 building with a green space complex and a private area for gym and entertainment (billiards, PES, café, reading, Pingpong)
• 30-minute relaxation daily with Happy hours (4:00 PM – 4:30 PM)
• Sports activities: Football, Billiards, Poker, PES clubs, etc

• 12 days of annual leave according to Labor Law and 3 days of company vacation, traditional holiday on 22/12

• Personal birthday celebrations: Gifts and birthday cake from the Company
• Participation in company events: Quarterly team building activities, monthly birthday celebrations, Year End Party, vacations, International Women’s Day (March 8th), Vietnamese Women’s Day (October 20th) (female employees recieve ½ day off), Viettel Group birthday on June 1st, etc