About the job SOC Manager
A fast-growing international technology team is expanding its engineering capability in Vietnam and is looking to hire a SOC Manager, who will play a critical leadership role in driving 24/7 Security Operations Centre (SOC) excellence. This is an opportunity to step into a high-visibility position, leading frontline cyber defense while shaping service delivery for enterprise clients.
In this role, you will take ownership of SOC operations—leading a team of Tier 1 & Tier 2 analysts, managing critical incidents, and ensuring service delivery aligns with top-tier industry standards. Beyond operations, you'll act as a trusted advisor to clients, driving continuous improvement and elevating cybersecurity capabilities.
Responsibilities:
SOC Leadership & Operations
- Lead, mentor, and scale a team of SOC analysts, driving performance and capability development
- Take charge of daily SOC operations, incident workflows, and shift management
- Own high-severity incident handling, providing expert-level investigation and resolution
- Ensure strict adherence to SOC playbooks, SOPs, and compliance frameworks
Service Delivery & Continuous Improvement
- Oversee delivery of cybersecurity services in line with SLAs and KPIs
- Drive continuous enhancements across SOC processes, detection capabilities, and tools
- Partner with internal teams to support seamless client onboarding and operations
Client Engagement & Escalation
- Act as the senior escalation point for key clients, ensuring timely resolution of critical issues
- Build strong client relationships, aligning cybersecurity services with business priorities
- Proactively identify risks and recommend value-added security improvements
Reporting & Strategic Influence
- Deliver insightful reporting on SOC performance, risk posture, and incident trends
- Translate data and metrics into actionable improvements
- Contribute to the evolution of SOC capabilities, frameworks, and service offerings
Requirements:
- 8+ years of experience in SOC operations and cybersecurity service delivery
- Professional certifications such as CISSP, CISA, or CISM (at least one required)
- Bachelor's degree in Cyber Security, Information Security, or a related field (Master's preferred)
- Fluent in English
- Proven track record of leading SOC or security operations teams in complex environments
- Strong hands-on expertise in SIEM, threat intelligence, IDS/IPS, firewalls, and malware analysis
- Solid grounding in frameworks such as MITRE ATT&CK and NIST
- Strong analytical mindset with the ability to make critical decisions under pressure
- Comfortable operating in a 24/7 SOC environment