CVCc Giám Sát An Ninh Bảo Mật(Soc)

**Mô Tả Công Việc**:
**1. Job Purpose**
- Responsible for Proactive monitoring, analyzing, detecting and resolving/escalating 24x7 security events, possibly cause security risks/incidents within SLA time.
- Security evidences management and make & optimize security reports
- Develope and optimize processes/procedures for monitoring and resolving security incidents

**2. Major Activities**
- Security monitoring 24x7 & incident response

+ Proactive monitoring, analyzing IT Security abnormal Events 24x7 (Attacks, compliance violations, virus/malware...) on the systems/Banking services to early alerts, recommendation to related departments for handling to prevent security incidents

+ Manage for escalation, co-ordinate with other related departments/other parties for handling Security Events to finish

+ Develope and maintain processes/procedures/guide for monitoring and resolving security incidents

+ Make and optimize monitoring reports in shifts, periodic reports of the week, month

+ Make and optimize monitoring reports in shifts, periodic reports of the week, month

+ Training security monitoring staffs/SOC team

Investigate intrusion incidents, conduct forensic investigations
- Cybersecurity Policy & Standards

+ Ensure that Cybersecurity Policies and Standards are aligned to SBV requirements and the desired cybersecurity posture of the Bank

+ Co-ordinate with other teams to develop technical policies, standards, procedures align with VPB Cybersecurity requirements

+ Develop guidelines to provide directions to stakeholders.
- Implement security program to security development

+ Join to implement

+ Participation with key technicque in security projects requires a very high of expertise skillexp: pentest/bug bounty

+Trial attacks & incident response

**Yêu Cầu Công Việc**:
**3. Relevant Knowledge/ Expertise**
- Bachelor's or Technical Degree Required (IT, Cryptography, computer science, information systems, business administration or other industry-related curriculum)
- Have at least 1.5 years of experiences in security areas
+ Having knowledge of banking services

+ Experienced in analyzing and monitoring logs on systems.

+ Experienced in using security solutions such as IPS/IDS, SIEM, DLP, PIM, NAC, virus/malware

+ Good knowledge international IT security standards (ISO 270001, PCI-DSS, ), ITIL

+ Good knowledge with with OWSAP Standard and ability discovery & exploit vulnerabilities, cyber attack

+ Good using some tools for hacking: VA, APPScan, Metaexploit, kalilinux

Basic skill with coding with some languages: Python, Shell, PHP and have good knowledge with encryption, cryptography techniques

**BENEFITS**
- Attractive salary, competitive salary and bonus according to ability
- Bonus on Holidays and New Year (according to banking policy from time to time)
- Get preferential loans according to the bank's policy from time to time
- Attractive leave mode according to job rank
- Compulsory insurance according to labor law + VPBank care insurance for employees depending on rank and working time
- Participate in training courses depending on the Training Framework for each position
- Working time: Monday - Friday & Saturday morning (two Saturday mornings/month off)
- Dynamic, friendly working environment with many opportunities for training, learning and development; participate in many interesting cultural activities (sports contests, talents, teambuilding activities...)

Job tags: CVCC Giám sát an ninh bảo mậtSOC-Hà Nội -TA OWSAP SIEM PIM NAC