Công việc Network Security / Cybersecurity: Vai trò, Kỹ năng, Lương & Lộ trình nghề nghiệp

Người làm Network Security / Cybersecurity làm gì hàng ngày?

Bảo vệ tài sản thông tin của tổ chức khỏi các mối đe dọa nội bộ & bên ngoài. Công việc xoay quanh 3 trụ cột: Prevent (Ngăn chặn) – Detect (Phát hiện) – Respond (Phản ứng).

Các vai trò (Roles) phổ biến & Trách nhiệm cốt lõi

Kỹ năng cốt lõi (Core Skills) – Phân nhóm

Technical Hard Skills: Networking (TCP/IP, DNS, BGP, VLAN, VPN, SDN), OS Internals (Windows/Linux Kernel, AD/Entra ID), Cloud (AWS/Azure/GCP), Scripting (Python, Go, PowerShell, Bash), IaC (Terraform, Ansible), Container/K8s, Crypto/PKI, Malware Analysis, Forensics.
Security Frameworks & Standards: MITRE ATT&CK, NIST CSF/800-53, ISO 27001, CIS Controls v8, Zero Trust (NIST 800-207), OWASP Top 10/ASVS/MASVS.
Soft Skills: Communication (Technical → Non-technical), Critical Thinking, Problem Solving, Collaboration (Dev/Infra/Business), Continuous Learning (Certs, CTF, Bug Bounty, Research), Ethics & Integrity.

Mức lương tham khảo (Việt Nam & Quốc tế – 2024)

Vai trò (Job Title)	Trách nhiệm chính	Kỹ năng cốt lõi	Chứng chỉ điển hình
SOC Analyst (L1/L2/L3)	Monitor alert 24/7, Triage, Investigation, Escalation, Basic containment. L1: Triage. L2: Deep dive. L3: Threat hunting, Complex IR.	SIEM (Splunk/Sentinel/Elastic), Log analysis, MITRE ATT&CK, Network/Host forensics basics, Scripting (Python/KQL).	Security+, CySA+, GCFA, GCIH, SC-200.
Security Engineer	Triển khai, cấu hình, vận hành, tuning công cụ bảo mật: Firewall, EDR/XDR, SIEM, Email Sec, WAF, ZTNA, PAM, DLP, CASB, Cloud Security.	Network/Cloud/OS internals, Automation (Ansible/Terraform/Python), CI/CD Security, Hardening (CIS Benchmark), Vendor management.	CISSP, CCNP Security, PCNSE, AZ-500, AWS Security Specialty, GCED.
Penetration Tester / Red Teamer	Mô phỏng tấn công (External/Internal/Web/App/Mobile/Cloud/Physical/Social) để tìm lỗ hổng trước kẻ xấu. Viết báo cáo, hỗ trợ remediation.	OSCP/OSEP/OSWE level. Exploit dev, C2 framework, AD/Entra ID attack, Cloud pentest, Wireless, Physical, Social Eng.	OSCP, OSEP, OSWE, CRTO, CRTP, PNPT, CEH (entry), GPEN.
Threat Hunter	Chủ động tìm threat đã bypass defenses. Hypothesis-driven (MITRE ATT&CK), Behavioral analytics, UEBA, Memory/Network forensics, Malware analysis.	Deep OS/Network internals, Sigma/YARA/Snort rule writing, Threat Intel, ATT&CK, Jupyter/Notebook, Python/Go/R.	GCTI, GCFA, GNFA, OSCP, Custom hunting certs.
Cloud Security Engineer	Secure AWS/Azure/GCP: IAM, Network (VPC/SG/NACL), Data (KMS/S3/Encryption), Workload (K8s/Container/Serverless), Compliance (CIS Benchmark, CSPM).	Cloud provider native services, IaC (Terraform), Kubernetes (CKS), CSPM/CWPP/CIEM tools, Python/Go automation.	AWS Security Specialty, AZ-500, GCP Cloud Security, CCSP, CKS, PCCSE.
Application Security (AppSec) Engineer	Shift-left: SAST/DAST/SCA/IAST trong CI/CD, Code review, Threat modeling (STRIDE/PASTA), DevSecOps pipeline, API Security, Supply Chain Sec (SBOM, SLSA).	Secure coding (Java/.NET/Go/JS/Python), OWASP Top 10/ASVS, SAST/DAST tools (Semgrep, CodeQL, Checkmarx, Snyk), Container sec.	GSSP-.NET/Java, CASE, DevSecOps certs, OSCP (helpful).
GRC / Security Analyst (Governance, Risk, Compliance)	Risk Assessment, Policy/Standard/Procedure, Audit (Internal/External), Compliance (ISO 27001, SOC 2, PCI-DSS, GDPR, Luật ATTT VN), Vendor Risk, Security Awareness.	Framework (NIST CSF, ISO 27001, COBIT), Risk quantification (FAIR), Audit methodology, Policy writing, Communication.	CISM, CISA, CRISC, ISO 27001 LA, CISSP, GRCP.
CISO / Security Leader	Chiến lược, Ngân sách, Tuyển dụng, Báo cáo Board, Legal/Regulatory, Culture, Vendor Mgt, Crisis Management.	Business alignment, Risk management, Leadership, Communication, Regulatory landscape, Architecture vision.	CISSP, CISM, CCISO, MBA (thường).

Vai trò	Việt Nam (USD/tháng / VNĐ/tháng)	US (USD/năm)	Singapore/AU (USD/năm)
SOC Analyst L1	$800-1,500 / 20-37M	$65-85k	$60-90k
SOC Analyst L2/L3	$1,500-3,000 / 37-75M	$85-130k	$90-140k
Security Engineer	$2,000-4,500 / 50-110M	$110-160k	$120-180k
Penetration Tester	$2,000-5,000 / 50-125M	$100-180k	$110-190k
Cloud Security Engineer	$2,500-5,500 / 60-135M	$130-190k	$140-200k
AppSec Engineer	$2,000-4,500 / 50-110M	$120-170k	$130-180k
Security Architect	$3,500-7,000 / 85-175M	$150-220k	$160-240k
CISO (Enterprise)	$8,000-20,000+ / 200-500M+	$250-500k+	$300-600k+

Lương VN chênh lệch lớn theo công ty (MNC vs Local vs Startup), kinh nghiệm, chứng chỉ, tiếng Anh. MNC thường trả cao 30-50% so với local.

Lộ trình nghề nghiệp (Career Path) gợi ý


Entry (0-2 năm)          Mid (3-5 năm)              Senior (5-8 năm)           Lead/Principal (8-12+)       Executive
├─ Helpdesk / NOC        ├─ SOC L2/L3               ├─ Sr Security Engineer    ├─ Security Architect      ├─ CISO
├─ Jr SOC Analyst        ├─ Security Engineer       ├─ Sr PenTester            ├─ Principal Engineer      ├─ VP Security
├─ Jr PenTester          ├─ Cloud Sec Engineer      ├─ Threat Hunter           ├─ Engineering Manager     ├─ CSO
├─ Jr Sys/Net Admin      ├─ AppSec Engineer         ├─ Detection Engineer      ├─ Security Program Mgr
└─ IT Support            ├─ GRC Analyst             ├─ Purple Teamer           └─ Distinguished Engineer
      │                       │                          │                           │
      └─ Cert: Sec+, Net+    └─ Cert: CySA+, CCNP      └─ Cert: CISSP, OSCP      └─ Cert: CISSP, SABSA
         CCNA, AZ-900          Security, AWS Sec        GCFA, Cloud Spec          TOGAF, Executive MBA

Xu hướng tuyển dụng 2024-2025

Cloud Security, Identity Security, Data Security (DSPM/DDR) – HOTTEST.
Automation/Engineering focus: Security Engineer > Analyst. "Detection as Code", "Policy as Code", "Infrastructure as Code".
AI/GenAI Security: LLM Security, Prompt Injection, Data Leakage, Model Theft, AI Red Teaming.
OT/ICS Security: Năng lượng, Sản xuất, Giao thông, Y tế – IT/OT Convergence.
Remote/Hybrid: Cơ hội toàn cầu (Remote for US/EU/SG companies từ VN).

Lời khuyên cho người mới bắt đầu

Xây dựng Home Lab (Proxmox/VMware/VirtualBox): AD Domain, Splunk/Elastic, Kali, Vulnerable VM (Metasploitable, DVWA, Juice Shop), Cloud Free Tier.
Học Networking cơ bản (CCNA level) + Linux (RHCSA level) + Python scripting – nền tảng bất biến.
Làm CTF (TryHackMe, Hack The Box, PicoCTF) – Học thực chiến, tư duy attacker.
Xem xét CompTIA Security+ làm cert nhập môn chuẩn hóa kiến thức.
Tham gia cộng đồng: VNSEC, OWASP VN, Null Singapore, BSides, Discord/Slack groups. Networking quan trọng không kém kỹ thuật.
Tạo Portfolio GitHub: Tools, Scripts, Writeups, Research, Home Lab docs.