Cyber Security Analyst

GoTymeX

. Continuously monitor security events across endpoints, cloud services, identities and applications to detect suspicious activity .

Posted 11/12/2026full-timeHo Chi Minh City • VietnamMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security operations and incident response, with a strong focus on vulnerability assessment, threat hunting, and the application of AI tools for security analysis. Proficient in documenting findings and communicating technical information effectively to diverse stakeholders.

Highest-signal resume keywords

Security OperationsIncident ResponseVulnerability AssessmentReverse EngineeringAI-Assisted Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident InvestigationThreat HuntingMalware AnalysisWeb Application SecurityAPI SecurityMobile Application SecurityLog AnalysisSecurity ConfigurationData CorrelationRisk Assessment

Soft Skills

Analytical SkillsDocumentation SkillsCommunication Skills

Tools & Technologies

EDRSIEMAWSMicrosoft Entra IDO365AI Tools

Industry Keywords

OWASP Top 10AuthenticationAuthorizationSession ManagementSecure StorageContinuous MonitoringSecurity PostureAccess ControlsIncident Response PlaybooksSecurity Monitoring

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Continuously monitor security events across endpoints, cloud services, identities and applications to detect suspicious activity
Investigate incidents, establish timelines and impact, preserve evidence, and coordinate containment, remediation and recovery
Apply reverse-engineering techniques to suspicious applications, scripts and binaries
Use approved AI tools for code analysis, artifact interpretation and investigation hypotheses, validating conclusions against source evidence
Document investigation findings, communicate incident status and next steps, and contribute to post-incident reviews and response playbooks
Collect, normalize and correlate security data from banking applications, EDR, SIEM, cloud infrastructure, audit logs, identity platforms and application telemetry
Develop scripts and automated workflows for alert enrichment, evidence analysis, threat hunting and reporting
Identify data-quality and logging gaps affecting detection and investigation coverage
Use AI-assisted analysis to identify patterns and summarize findings while maintaining traceability, accuracy and sensitive-data protection
Assess vulnerabilities across web applications, APIs, mobile applications, endpoints and cloud infrastructure
Validate findings and assess exploitability and business impact
Identify weaknesses in authentication, authorization, session management, secure storage, payment transactions and business logic
Track remediation and verify that fixes address underlying risks
Research emerging vulnerabilities and attack techniques
Identify and document technology assets, ownership, criticality, data flows and dependencies
Develop and recommend risk-based security controls with engineering and infrastructure teams
Oversee system security posture through configuration reviews, access-control checks, asset inventories and monitoring of security-relevant changes
Evaluate control effectiveness, identify coverage gaps and recommend improvements to security monitoring and response procedures

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, Information Security or a related field, and/or 3+ years of relevant work experience
Practical experience in security operations and incident response across endpoint, cloud or application environments
Strong understanding of web, API and mobile application security, including authentication, authorization, session management, secure storage and common attack techniques
Familiarity with OWASP Top 10, API security risks and mobile application security principles
Practical reverse-engineering and malware-analysis skills, including familiarity with static and dynamic analysis techniques
Hands-on experience with EDR, SIEM, log analysis and security investigation tools
Hands-on vulnerability assessment experience and the ability to distinguish validated risks from scanner findings
Hands-on experience investigating security events across AWS and Microsoft Entra ID and O365
Understanding of asset inventory, security configuration, access controls and continuous monitoring
Experience using AI to support security analysis, investigations and scripting
Strong analytical, documentation and communication skills, including explaining technical findings and business impact to non-technical stakeholders

Benefits

Comp & perks

Performance-based bonus of up to 2 months
Pro-rated 13th-month salary
Equity participation in GoTyme Group
Full salary and benefits during probation
Meal and parking allowances
Insurance in line with Vietnamese labor law
Premium healthcare coverage for you and your family, with no seniority requirement
15 days of annual leave
3 sick days
1 birthday leave
1 Christmas leave
SMART goals and clear career opportunities
Access to technical seminars, conferences, and career talks
Opportunities to travel overseas for training and work
Internal hackathons and company events, including Town Halls, company trips, and team events
40-hour workweek, Monday to Friday
Flexible working arrangements available for discussion