Senior Associate Managed Services Information Security Analyst

Overview

A developing subject matter expert role within NTT DATA's global Cyber Defense Centre, monitoring, analyzing and reporting on client security data to deliver security information, recommendations and contracted managed security services.

What you'll do

• Work as part of a global Cyber Defense Centre (CDC) team that works 24/7 on rotational shifts.
• Work with client stakeholders and the Information Security Manager (ISM) to tune the MSSP platform and client SIEM for more efficient detection, analysis and reporting.
• Monitor security tools and review and analyze security logs from client environments.
• Generate continuous improvement ideas for supported security tools and technologies.
• Adhere to SOPs, customer Run Books and standard processes, and propose changes and improvements to these standards.
• Utilise and document best practices and amend existing documentation as required.
• Handle and respond to security incidents from several vectors, including End Point Protection and Enterprise Detection and Response tools, attack analysis, malware analysis, network forensics and computer forensics.
• Utilize a broad range of skills in LAN technologies, Windows and Linux operating systems, and general security infrastructure.
• Use knowledge articles in incident diagnosis and resolution, and identify when updates are required.
• Perform defined tasks to inform and monitor service delivery against service level agreements and maintain records of relevant information.
• Undertake a limited range of threat hunting activities across individual client estates and cross-client hunting.
• Manage unresolved incidents and follow up until they are resolved.
• Apply critical thinking to ensure the best outcomes for the client and NTT within the boundaries of the service and SOPs.
• Cooperate closely with colleagues to share knowledge and build a cohesive team environment.
• Perform any other related task as required.

What you'll need

• Developing knowledge of implementation and monitoring of a company-supported SIEM or security tools, technologies and concepts.
• Developing knowledge of security architecture, having worked across different security technologies.
• Developing knowledge and understanding of the operation of modern computer systems and networks and how they can be compromised.
• Excellent customer service orientation and pro-active thinking.
• Problem solving abilities, high drive and self-organization.
• Excellent attention to detail.
• Analytical and logical thinking.
• Well spoken and written communication abilities.
• Ability to remain calm in pressurized situations.
• Ability to keep current on emerging trends and new technologies in area of specialization.
• Bachelor's degree or relevant qualification in Information Technology, Computing or a related field.
• Security certifications such as (but not limited to) AZ-500, SC-200, Security+, CEH, CISSP, CISM or similar.
• Moderate level of experience in SOC analysis operations.
• Moderate level of experience in SIEM usage for investigations.
• Moderate level of experience in security technologies such as (but not limited to) Firewall, IPS, IDS and Proxy.
• Moderate level of experience in dealing with technical support to clients.
• Moderate level of experience in handling security incidents end to end.
• Moderate level of experience in configuring or managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots and other security tools.
• Moderate level of experience in Security Analysis or Engineering, preferably gained within a global services organization.

Nice to have

• Certification in networking technologies such as CCNA, JNCIA, ACCA, PCNSA or CCSA.

Details

• Location: Hyderabad.
• Workplace type: Hybrid.
• Shift work: rotational 24/7 shifts within a global CDC team.