Information Security Specialist-2

Overview

Information Security Specialist-2 role at NTT DATA focused on configuring, deploying and managing security tools (NextGen SIEM, SOAR, EDR), privileged and non-human access control, and cloud and container security compliance, with incident handling and troubleshooting across security technologies.

What you'll do

• Configure, deploy and manage NextGen SIEM, SOAR and EDR.
• Create playbooks, correlation rules, dashboards and workflows to manage security operations.
• Oversee JIT (just-in-time) access via Falcon Privileged Access, manage standing privileges, and monitor non-human/service account hygiene.
• Create and maintain Zero Trust and conditional access policies for privileged accounts, service/non-human accounts, stale accounts and risky logins.
• Enable and assign compliance benchmarks (e.g., CIS Benchmarks, NIST, PCI-DSS, SOC2, HIPAA) to specific cloud groups or accounts.
• Build tailored posture policies to catch non-standard infrastructure risks.
• Perform deployment and administration tasks in CrowdStrike, including container scans and CI/CD image scanning.
• Work with CASM and policy compliance reports, container security within DevOps, deploying passive network sensors, and cloud connectors in Qualys.
• Troubleshoot Linux, firewalls, Python scripts, AD logs and system logs.
• Troubleshoot security agent deployment and systems that are not reporting in tool UIs, and system performance issues caused by security agent deployment.
• Create IOA/IOC/ML exclusions and USB exceptions, and block IOCs in security tools.

What you'll need

• Bachelor's degree or equivalent in Information Technology or a related field.
• Hands-on experience with Linux and Windows operating systems.
• Experience with API integration and authentication.
• Extended experience in security technologies such as firewall, IPS, IDS and proxy.
• Extended experience in technical support to clients, diagnosis and troubleshooting, and remote support in security technologies.
• Extended experience in SOC/CSIRT operations and handling security incidents end to end.
• Knowledge of networking, Linux and security concepts.
• Extensive experience configuring and managing security controls such as firewall, IDS/IPS, EDR, NDR, UTM, proxy, SOAR, honeypots and other security tools.
• Knowledge of log collection mechanisms such as Syslog, log file and DB API.
• Knowledge of security architecture.
• Extensive experience in security engineering.

Nice to have

• Relevant level of cloud certifications such as AWS, Azure or GCP.
• Relevant level of security certifications such as AZ-500, SC-200, Security+, CEH, CISSP or CISM (added advantage).

Details

• Location: Bangalore, India.
• Workplace type: Hybrid.