Senior SOC Analyst/ SOC Lead

Overview

Senior SOC Analyst / SOC Lead role in NTT DATA's Managed Services Information Security team, monitoring, analyzing and reporting on client security data and delivering security recommendations to clients as part of a global Cyber Defense Centre working 24/7 rotational shifts.

What you'll do

• Monitor security tools and review and analyze security logs from client environments.
• Perform security incident detection, handling and response, including attack analysis, malware analysis, network forensics and computer forensics.
• Undertake threat hunting across individual client estates and across clients.
• Work with client stakeholders and internal teams to tune the MSSP platform and client SIEM for more efficient detection, analysis and reporting.
• Interact with clients to ensure understanding of generated information, recommend client system changes and answer security-related queries.
• Adhere to SOPs, customer Run Books and standard processes, and propose improvements to them.
• Use and document best practices and keep knowledge articles updated.
• Identify opportunities for automation that help clients and security delivery teams.
• Manage unresolved incidents and follow up until they are resolved.
• Monitor service delivery against SLAs and maintain relevant records.
• Work closely with client delivery teams and colleagues to share knowledge.
• Generate continuous improvement ideas for supported security tools and technologies.
• Perform any other related tasks as required.

What you'll need

• Bachelor's degree or relevant qualification in Information Technology, Computing or a related field.
• Seasoned knowledge of implementing and monitoring a company-supported SIEM or security tools, technologies and concepts.
• Seasoned knowledge of security architecture across different security technologies.
• Seasoned knowledge and understanding of how modern computer systems and networks operate and can be compromised.
• Seasoned experience in SOC analysis operations.
• Seasoned experience in SIEM usage for investigations.
• Seasoned experience in security technologies such as Firewall, IPS, IDS and Proxy.
• Seasoned experience in technical support to clients.
• Seasoned experience in handling security incidents end to end.
• Seasoned experience in configuring or managing security controls such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots and other security tools.
• Seasoned experience in security analysis or engineering, preferably within a global services organization.
• Security certifications such as (but not limited to) AZ-500, SC-200, Security+, CEH, CISSP, CISM or similar.
• Excellent customer service orientation, pro-active thinking, problem-solving ability, attention to detail, and analytical and logical thinking.
• Excellent spoken and written communication, and the ability to remain calm in pressurized situations.

Nice to have

• Certification in networking technologies such as CCNA, JNCIA, ACCA, PCNSA or CCSA.

Details

• Workplace type: Hybrid.
• Works as part of a global Cyber Defense Centre team on 24/7 rotational shifts.