Security Content Analyst

Overview

Viettel Cyber Security One Member Limited Liability Company (VCS) focuses on the implementation, research, and in-depth development of information security products and solutions, while also providing cybersecurity (CS) products and services to large domestic and international organizations and enterprises.

Some notable achievements of VCS:

• The Champion of Pwn2Own 2023 & 2024. Previously, VCS consistently ranked in the Top Five positions at Pwn2Own Tokyo 2020, Vancouver 2021, and Toronto 2022.
• In addition to Pwn2Own, VCS has consistently made its mark and topped numerous prestigious cybersecurity attack rankings and competitions worldwide, including those held by Microsoft, Bugcrowd, Google, Oracle, and others.
• VCS has exploited over 400 Zero-day security vulnerabilities on major platforms and systems of Microsoft, Oracle, Jenkins, and others.
• Received 11 awards at the Cybersecurity Excellence Awards 2023, surpassing more than 800 nominations from leading global cybersecurity solution providers.
• Global InfoSec Awards 2023 (Cyber Defense Magazine)
• IT World Awards 2023: https://globeeawards.com/technology/winners/
• Viettel Cyber Security excelled in achieving the Gold award in the Best Cyber Security Company in Asia category for 2023.
• 07 Gold awards for products: Network Security Monitoring Solution (VCS-CyM), Abnormal Behavior Analysis Solution (VCS-KIAN), Network Security Orchestration, Automation and Response Solution (VCS-CyCir), Endpoint Anomaly Detection Solution (VCS-aJiant), Secure Remote Working Solution for Enterprises (VCS M-Suite); Cyber Threat Intelligence Solution (VCS-Threat Intelligence); Network Security Vulnerability Management and Control Solution (VCS-V2S).
• 03 Gold award for services: Managed Security Services (MSS), Penetration Testing Service (Pentest), IoT Security Assessment Service.

About Security Operation Center is responsible for monitoring and handling information security issues to detect, analyze, respond to, prevent, and investigate security incidents, ensuring cybersecurity for an organization. The SOC currently manages and provides services to nearly 100 clients, including government ministries and agencies, and multi-industry organizations and enterprises both domestically and internationally.

Responsibilities

• Job Description:

– Develop attack detection rules for VCS’s solutions according to the standards and formats of each solution

– Develop attack detection rules according to common international standards and formats such as Snort/Suricata, YARA, Sigma, etc

– Modify and optimize attack detection rules based on feedback from solution operations, cybersecurity monitoring, or other relevant departments

– Research and understand VCS’s cybersecurity solutions, propose additional data sources for the solutions to enable attack detection

– Research, participate in conferences, propose, and agree on attack and defense methods for attack techniques and emerging threats

Qualifications

• Educational Background: 

– Bachelor’s degree in: Information Security; Information Technology, Computer Science, Mathematics-Informatics…

– English proficiency equivalent to TOEIC 650 or higher

• Requirements/Competencies:

– At least 1.5 years of experience in the field of information security. Priority given to candidates with experience in building and deploying information security rules

– Basic knowledge of cybersecurity & network attack methods (possessing CEH, Security+ certification or equivalent assessment)

– Understanding of common Data Sources and the relationships between different types of Data Sources

– Knowledge of the operating mechanisms of host-based, network-based, and log-based defense solutions, such as EDR/NSM/SIEM/KIAN

– Skills in building network-based and endpoint-based rules (such as Snort/Suricata, YARA, etc.)

– Priority given to candidates with CEH and OSCP certifications

Benefits & perks

• Competitive annual total income package
• Opportunity to work with diverse domestic and international clients
• Annual salary review in March

• MIC health and personal accident insurance (coverage up to 600 million VND/year)
• Annual health check-up

• Awards recognizing performance and timely outstanding contributions
• 100% sponsorship for in-depth international professional certification based on position (in case of unsuccessful attempt, don’t worry, VCS will support 50% of the exam fee), special bonuses for employees achieving international professional certifications
• Continuous investment in the latest and most up-to-date learning materials in the field of Information Security from leading global vendors and institutes
• 100% of employees are provided with an Udemy eLearning account – learn anytime, anywhere
• Free participation in professional knowledge sharing programs and seminars from leading domestic and international speakers

• Working in a Grade A office – Landmark 72 building with a green space complex and a private area for gym and entertainment (billiards, PES, café, reading, Pingpong)
• 30-minute relaxation daily with Happy hours (4:00 PM – 4:30 PM)
• Sports activities: Football, Billiards, Poker, PES clubs, etc

• 12 days of annual leave according to Labor Law and 3 days of company vacation, traditional holiday on 22/12

• Personal birthday celebrations: Gifts and birthday cake from the Company
• Participation in company events: Quarterly team building activities, monthly birthday celebrations, Year End Party, vacations, International Women’s Day (March 8th), Vietnamese Women’s Day (October 20th) (female employees recieve ½ day off), Viettel Group birthday on June 1st, etc