Information Security Incident Response Analyst

The Nippon Telegraph and Telephone Corporation (NTT); United Kingdom; Remote; GBP 50,000 - 70,000; Full time

Job summary

A global technology services company is seeking an Information Security Incident Response Analyst to manage security breaches and incidents. The ideal candidate will have a strong background in cybersecurity, including experience with detection and response software. This remote role requires excellent technical communication skills and the ability to work with global teams. Join a diverse and inclusive workplace that invests in your growth.

Qualifications

• Strong understanding of recent technological advances within the information security arena.
• Strong understanding of the inter-relationships in an overall system or process.
• Strong knowledge of the organisation's business operations.

Responsibilities

• Manage the prevention and resolution of security breaches.
• Perform access management activities according to policy.
• Manage 1st level triaging of security alerts.
• Log and manage service requests through to resolution.

Skills

End Point Protection Software

Enterprise Detection and Response software

Information security management

Risk management principles

Technical communication

Critical thinking and problem-solving

Education

Bachelor's degree or equivalent in Information Technology, Computer Science or related

SANS GIAC Security Essentials (GSEC)

SANS GIAC Certified Intrusion Analyst (GCIA)

SANS GIAC Certified Incident Handler (GCIH)

Tools

SIEM technologies

IPS technologies

Wireshark

tcpdump

Job description

Overview

Make an impact with NTT DATA. Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it's a place where you can grow, belong and thrive.

Your day at NTT DATA

The Information Security Incident Response Analyst is a seasoned subject matter expert, responsible for detecting and monitoring escalated threats and suspicious activity affecting the organization's technology domain (servers, networks, appliances and all infrastructure supporting production applications for the enterprise, as well as development environments).

This role supports the work of technical staff from various business areas as well as third-party technical experts.

The Information Security Incident Response Analyst uses their technical competencies of systems and automated mechanisms to detect unauthorized activity on company information assets.

Key responsibilities

• Manages the prevention and resolution of security breaches and ensure incident and problem management processes are initiated.
• Performs access management activities according to the policy.
• Implements and discusses security service audit schedules, review access authorisation and perform the required access controls and testing to identify security weaknesses.
• Interacts with a global team of Cyber Security Analysts and specialists.
• Manages 1st level triaging of security alerts, events, and notifications.
• Manages notification of internal and/or external teams according to agreed alert priority levels, and escalation trees.
• Communicates status of response, resolution and final root cause analysis to the appropriate stakeholders.
• Follows and updates established and/or ad-hoc processes and work instructions and create procedures where deficiencies are identified.
• Logs, manages and coordinates service requests through to resolution including the identification, isolation, resolution and escalation of IT infrastructure faults.
• Maintains an understanding of current and emerging threats, vulnerabilities, and trends.

To thrive in this role, you need to have

• Strong understanding of End Point Protection Software.
• Strong understanding of Enterprise Detection and Response software.
• Strong knowledge of technological advances within the information security arena.
• Strong understanding of inter-relationships in an overall system or process.
• Strong knowledge of information security management and policies.
• Strong understanding risk management principles and frameworks is crucial for prioritizing and addressing security incidents.
• Strong understanding of the organisation's business operations, goals, and objectives enables the analyst to align incident response efforts with the broader business strategy.
• Ability to effectively communicate technical information to both technical and non-technical stakeholders, and end-users, as well as working with cross-functional teams during incident response.
• Ability to think critically, analyze information, and solve medium to complex problems.

Academic qualifications and certifications

• Bachelor's degree or equivalent in Information Technology, Computer Science or related preferred.
• SANS GIAC Security Essentials (GSEC) or equivalent preferred.
• SANS GIAC Certified Intrusion Analyst (GCIA) or equivalent preferred.
• SANS GIAC Certified Incident Handler (GCIH) or equivalent preferred.

Required experience

• Seasoned experience in a Technology Information Security Industry.
• Seasoned experience or knowledge of SIEM and IPS technologies.
• Seasoned experience with Wireshark or tcpdump to identify normal and abnormal/malicious traffic patterns and behaviors.

Workplace type

Remote Working

About NTT DATA

NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.

Third parties fraudulently posing as NTT DATA recruiters

NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters-whether in writing or by phone-in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.