Senior Security Platform Engineer (m/f/d)

NTT Global Data Centers; Dacorum; On-site; GBP 90,000 - 130,000; Full time

Job summary

NTT Global Data Centers is seeking a Senior Security Platform Engineer (m/f/d) to advance and mentor the GDC-OIS team. This role focuses on threat hunting, SIEM/SOAR, and IT/OT vulnerability management across global data centers.

You will lead security platform administration, incident response, and security architecture improvements, working with cross‑functional teams to strengthen defenses and enable secure operations in hybrid IT/OT environments.

Qualifications

• Bachelor's degree in Information Technology or related field.
• Security certifications such as CySA+, PenTest+, CCSP, CISSP preferred.
• Experience with SIEM, PAM, IAM, PenTest and threat hunting in global environments.

Responsibilities

• Serve as senior member of a 24/7 global cybersecurity team, guiding incident response.
• Administer and optimize enterprise security platforms, performing patching and upgrades.
• Lead complex security incident response across endpoints, networks and IT/OT.
• Design and execute advanced vulnerability assessments with risk-based remediation.
• Monitor threat intelligence feeds and security alerts to identify emerging risks.
• Mentor junior engineers and drive strategic security projects.

Skills

Threat hunting

SIEM/SOAR

Incident response

Security architecture

Vulnerability management

Log monitoring

Education

Bachelor's degree in Information Technology or related field

Security certifications (CySA+, PenTest+, CCSP, GCIH, OSCP, CISM, CISSP)

IT certifications (CCNA, CCNP, RHCSA, GRID, GICSP, AZ-500, SC-200)

Tools

EDR

PAM

IAM

Firewalls

Threat intel platforms

Job description

The Senior Security Platform Engineer (m/f/d), is an advanced subject matter expert, responsible for facilitating problem resolution and mentoring for the overall Global Data Centers Office of Information Security (GDC-OIS) team. This role is critical in improving, developing and maintaining IT/OT vulnerability management programs and processes.

This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning).

Key Responsibilities:

• Serves as a senior member of a 24/7 global GDC Cybersecurity team, providing leadership in IT/OT environments with required expertise in ICs and SCADA systems.
• Leads the administration and optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems.
• Directs complex security incident response efforts across multiple vectors—endpoint protection, EDR, malware analysis, network and computer forensics—ensuring rapid containment and root cause analysis.
• Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence.
• Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures.
• Interprets and synthesizes threat reports to guide architectural improvements and validate the effectiveness of current security controls.
• Partners with cross-functional teams to develop and implement enterprise-wide mitigation strategies, configuration baselines, and patch management frameworks.
• Champions automation initiatives to streamline incident response, threat detection, and reporting workflows, leveraging available security platforms and scripting.
• Maintains and evolves the knowledge base by authoring and reviewing technical articles, playbooks, and SOPs to ensure consistency and operational excellence.
• Leads post-incident reviews, driving service recovery, documentation, and implementation of preventive measures across teams and vendors.
• Provides expert-level guidance on specialized security domains and technologies, ensuring comprehensive and efficient resolution of escalated incidents.
• Ensures meticulous incident logging and fosters collaboration across internal teams, client IT environments, vendors, and carriers to expedite resolution.
• Conducts advanced data correlation and threat hunting across diverse sources—network traffic, email logs, malware samples, web server logs, DNS records—to uncover stealthy threats and improve detection capabilities.
• Leads strategic security projects, mentors junior engineers, and contributes to the evolution of the organization’s security posture through innovation and thought leadership.

Knowledge & Attributes:

• Multiple years experience of working in IT and/or Security Operation centers required. Experience in a Data Center environment an added plus.
• Advanced expertise in architecting, implementing, and optimizing SIEM and security platforms across hybrid environments. Demonstrated leadership in ICs and SCADA security integration and monitoring within critical infrastructure.
• Deep knowledge on security architecture, with hands-on experience designing and integrating multi-layered security solutions across diverse technology stacks.
• Strategic customer engagement mindset with a proactive approach to anticipating security needs, influencing stakeholders, and driving continuous improvement in service delivery.
• Recognized as a strategic problem solver with a track record of resolving complex security challenges independently and leading cross-functional teams through ambiguity.
• Exceptional attention to detail in high-stakes environments, ensuring precision in threat detection, incident response, and documentation that supports audit and compliance.
• Advanced analytical acumen with the ability to synthesize threat intelligence, correlate multi-source data, and drive actionable insights for risk mitigation.
• Polished spoken and written communication skills with English as the preferred language.
• Proven leadership in global security teams, fostering collaboration across departments, mentoring junior engineers, and driving alignment between security operations and business objectives.

Academic Qualifications & Certifications:

• Bachelor's degree or equivalent in Information Technology or related field.
• Relevant level of Security certifications such as CySA+, PenTest+, CCSP, GCIH, OSCP, CISM, CISSP etc. preferred.
• Relevant level of IT certifications such as CCNA, CCNP, RHCSA, GRID, GICSP, AZ-500, SC-200, etc. will be added advantage.

Required Experience:

• Advanced experience in Security technologies like (SIEM, PAM, IAM, PenTest, Threat Hunting, Firewall, Proxy etc.) preferably within a global IT services organization.

Who we are

As the third largest data center provider, we operate over 150 data centers in more than 20 countries and regions. We understand that every business – large and small – has its own unique needs and goals. We offer local-to-global data center expertise, aligned with our connected platform of AI-ready data centers to create solutions that enable our clients to seamlessly scale their digital businesses, anywhere and anytime.