SOC Analyst

Tether.to

. Monitor, triage, and analyze security alerts and events from SIEM, EDR, SSE, and WAF platforms .

Posted 11/4/2026full-timeRemote • VietnamMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in monitoring and analyzing security alerts using SIEM, EDR, SSE, and WAF platforms, with a strong focus on incident response, threat hunting, and vulnerability management. Proficient in developing technical documentation and collaborating across teams to enhance the organization's security posture.

Highest-signal resume keywords

SOC Analyst ExperienceIncident ResponseThreat HuntingMITRE ATT&CK FamiliarityEDR, SSE, SIEM, WAF Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Incident InvestigationAlert TriageEndpoint SecurityNetwork SecurityCloud SecurityZero Trust PrinciplesDetection Content TuningVulnerability ManagementTechnical DocumentationIncident Response Playbooks

Soft Skills

Analytical SkillsProblem-Solving SkillsAttention to DetailCommunication SkillsCollaboration Skills

Tools & Technologies

SIEM PlatformsEDR PlatformsSSE PlatformsWAF PlatformsThreat Intelligence Tools

Certifications & Qualifications

Security+CySA+GCIAGCIHBTL1

Industry Keywords

CybersecurityIncident ResponseThreat HuntingSecurity PostureMITRE ATT&CK

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Monitor, triage, and analyze security alerts and events from SIEM, EDR, SSE, and WAF platforms
Investigate security incidents end to end through triage, analysis, containment, eradication, and post-incident documentation
Coordinate with relevant teams during incident investigations
Determine the scope, severity, and impact of security events
Separate true positives from false positives and escalate confirmed incidents
Execute response actions such as isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions
Perform structured shift handovers across regions in the follow-the-sun model
Threat hunt across endpoint, network, and log data, mapping findings to MITRE ATT&CK
Provide feedback on detection quality and tune SIEM correlation rules, EDR custom detections, and WAF rules
Enrich investigations with threat intelligence, indicators of compromise, attacker techniques, and emerging campaigns
Develop and maintain technical documentation, standard operating procedures, and incident response playbooks
Collaborate with IT, infrastructure, application, and security engineering teams
Support vulnerability management and continuous improvement of the organization's security posture
Report to the SOC Lead

Requirements

What you’ll need

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience)
At least 3 years of hands-on experience as a SOC Analyst, triaging alerts and investigating security incidents in a production environment
Solid working knowledge of EDR, SSE, SIEM, and WAF
Hands-on experience implementing, configuring, and tuning security platforms, or writing and tuning detection content, is a big plus
Experience with incident response and threat hunting
Familiarity with the MITRE ATT&CK framework is ideal
Excellent understanding of network security, endpoint security, cloud security, and Zero Trust principles
Relevant certifications such as Security+, CySA+, GCIA, GCIH, BTL1, or vendor-specific credentials are a plus
Strong analytical, troubleshooting, and problem-solving skills with high attention to detail
Ability to handle sensitive information responsibly and securely
Good written and verbal communication skills in English
Ability to work effectively across technical and non-technical teams and across time zones
Comfortable working independently in a remote, follow-the-sun team

Benefits

Comp & perks

Fully remote work
Global remote team and follow-the-sun work model
Opportunity to collaborate with global fintech and digital finance experts
Professional development through hands-on work with security platforms, threat hunting, and incident response
Flexible remote setting
Global team collaboration across time zones