Senior Security Platform Engineer

Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it's a place where you can grow, belong and thrive.

Your day at NTT DATA
The Senior Security Platform Engineer is an advanced subject matter expert, responsible for facilitating problem resolution and mentoring for the overall team.

This performs operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning).

The Senior Security Platform Engineer is responsible for detecting and monitoring escalated threats and suspicious activity affecting the organization's technology domain (servers, networks, appliances and all infrastructure supporting production applications for the enterprise, as well as development environments).

Key Responsibilities:

• Work as part of a global CSIRT team that works 24/7 on rotational shifts.
• Work as part of Platform and Content Engineering handling tunings, stake holder requests, escalations, reporting, trainings
• Administration of the NTT Data Inc security tools to gather security logs from environment 4 Life cycle management of the supported security tools/technologies, Break-fix, Patching, Live update
• Adhering to SOPs and notify stake holders on log flow/log format issues
• Document best practices
• Identify opportunities to make automations which will help the incident response team.
• This role involves security incident handling and response from several vectors including End Point Protection and Enterprise Detection and response tools, attack analysis, malware analysis, network forensics, computer forensics, and a broad range of skills in LAN technologies, Windows and Linux O/S's, and general security infrastructure.
• Carry out agreed maintenance tasks
• Ensures usage of knowledge articles in incident diagnosis and resolution and assist with updating as and when required
• Perform defined tasks to monitor service delivery against service level agreements and maintains records of relevant information
• Investigate causes of incidents and seeks resolution
• Escalate unresolved incidents and fo
• Installing, configuring, and deploying a range of security tools, such as Security Information and Event Management (SIEM) systems, Endpoint Detection and Response (EDR) solutions, Threat Intelligence Platforms (TIPs), SOAR tools, and Cloud Security Posture Management (CSPM) tools.
• Excellent in Excel - Pull reports from multiple security tools and represent the data into charts , pivot tables, Dashboards
• Must have troubleshooting experience in Linux, Firewalls, Scripts, Authentication issues, AD logs, System logs, review syslog messages
• Excellent in API integration and troubleshooting.
• Automating security tasks using the SOAR tool and enterprise security tools
• Flexible work arrangement to support the global security team.
• Good experience in creating playbooks, correlation rules, dashboard, and workflow to manage
• Implementing and maintaining security policies and standards across various platforms.
• Conducting regular system audits on security tools and ensure compliance with security standards.
• Experience in coding to create scripts, making daily operations more efficient by automating processes.
• Break-fix skills focus on troubleshooting and resolving issues that disrupt normal operation of security systems or infrastructure.
• Systematically applying updates and fixes to address vulnerabilities, bugs, and enhance functionality on our security tools that we manage
• Create Standard operating procedures
• Excellent Documentation in creating service now workflows and service catalogues
• Good understand on Windows and Linux OS logs
• Document the issues thoroughly and work with vendors to resolve the issues
• Work experience on resolving the performance issues on security tools
• Share best practices and share the knowledge within the team
• Staying up to date with the latest security threats, vulnerabilities, and best practices, and adapting security measures.
• llow up until incident is resolved
• Provide service recovery, following resolution of incidents
• Document and close resolved incidents according to agreed procedures
• Investigate and identifies root cause of incidents and assist with the implementation of agreed remedies and preventative measures
• Maintain knowledge of specific specialisms, provides detailed advice regarding their application
• Ensure efficient and comprehensive resolution of incidents, including ensuring that repairs are carried out by coordinating product requests, working with other team members
• Log all such incidents in a timely manner with the required level of detail with all the necessary
• Cooperate with all stakeholders including client IT environments, vendors, carriers and NTT colleagues to expedite diagnosis of errors and problems and to identify a resolution

Knowledge and Attributes:

• Advanced working knowledge on implementation of any SIEM or security tools/technologies.
• Advanced knowledge on security architecture, worked across different security technologies.
• Advanced knowledge on Linux, Scripting and authentication
• Customer service orientated and pro-active thinking.
• Problem solver who is highly driven and self-organized.
• Great attention to detail.
• Good analytical and logical thinking.
• Excellent spoken and written communication skills.
• Team player with the ability to work well with others and in group with colleagues and stakeholders.

Academic Qualifications and Certifications:

• Bachelor's degree or equivalent in Information Technology or related field.
• Relevant level of Networking and Security certifications such as CCNA, Qualys VMDR, Qualys-WAS, CCFA, AZ-500, SC-200, Security+, CEH, CISSP, CISM etc. will be added advantage.

Required experience:

• Advanced experience in Security technologies like (NextGen SIEM, SOAR, EDR, Firewall, IPS, IDS, Proxy etc.).
• Advanced experience in technical support to clients.
• Advanced experience in diagnosis and troubleshooting.
• Advanced experience providing remote support in Security Technologies.
• Advanced experience in SOC Administration & Engineering task.
• Knowledge on Network, Windows, Linux and security concepts.
• Knowledge on log collection mechanism such as Syslog, Log file, DB API.
• Knowledge in security architecture.
• Advanced experience in Security engineering

Workplace type:
Hybrid Working

About NTT DATA
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

Equal Opportunity Employer
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.

Third parties fraudulently posing as NTT DATA recruiters
NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters—whether in writing or by phone—in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an

email address. If you suspect any fraudulent activity, please
contact us
.