Senior Security Platform Engineer (m/f/d)

NTT Global Data Centers; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

NTT Global Data Centers is seeking a Senior Security Platform Engineer to join the GDC-OIS team. The role requires expert-level skills in threat hunting, SIEM/SOAR, and incident response across IT/OT environments.

You will lead the administration of security platforms, perform vulnerability assessments, and guide strategic security initiatives globally. The position emphasizes collaboration with cross-functional teams, mentoring junior engineers, and driving continuous improvements in security

Qualifications

• Advanced experience in security operations and threat hunting.
• Proven leadership in IT/OT security integration for complex environments.
• Hands-on design and implementation of multi-layered security solutions.

Responsibilities

• Lead 24/7 global cybersecurity operations for IT/OT environments.
• Oversee lifecycle management of security platforms and integration with ecosystems.
• Direct complex incident response across endpoints, network, and forensics.
• Conduct advanced vulnerability assessments and prioritize remediation by risk.
• Monitor threat intelligence feeds and propose strategic countermeasures.
• Guide architectural improvements and validate security controls for compliance.
• Develop enterprise-wide mitigation strategies and patch management.
• Drive automation in incident response and reporting workflows.
• Author and maintain knowledge bases, playbooks, and SOPs.
• Lead post-incident reviews and preventive measures across teams.

Skills

Security leadership

Threat hunting

SIEM/SOAR

Incident response

Security architecture

Education

Bachelor's degree in IT or related field

Security certifications (preferred)

Tools

SIEM

PAM

IAM

PenTest

Threat intelligence

Firewall

Job description

The Senior Security Platform Engineer (m/f/d), is an advanced subject matter expert, responsible for facilitating problem resolution and mentoring for the overall Global Data Centers Office of Information Security (GDC-OIS) team. This role is critical in improving, developing and maintaining IT/OT vulnerability management programs and processes.

This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning).

Key Responsibilities:

• Serves as a senior member of a 24/7 global GDC Cybersecurity team, providing leadership in IT/OT environments with required expertise in ICs and SCADA systems.
• Leads the administration and optimization of enterprise security platforms, overseeing lifecycle management including break-fix, patching, version upgrades, and integration with broader security ecosystems.
• Directs complex security incident response efforts across multiple vectors—endpoint protection, EDR, malware analysis, network and computer forensics—ensuring rapid containment and root cause analysis.
• Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence.
• Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures.
• Interprets and synthesizes threat reports to guide architectural improvements and validate the effectiveness of current security controls.
• Partners with cross-functional teams to develop and implement enterprise-wide mitigation strategies, configuration baselines, and patch management frameworks.
• Champions automation initiatives to streamline incident response, threat detection, and reporting workflows, leveraging available security platforms and scripting.
• Maintains and evolves the knowledge base by authoring and reviewing technical articles, playbooks, and SOPs to ensure consistency and operational excellence.
• Leads post-incident reviews, driving service recovery, documentation, and implementation of preventive measures across teams and vendors.
• Provides expert-level guidance on specialized security domains and technologies, ensuring comprehensive and efficient resolution of escalated incidents.
• Ensures meticulous incident logging and fosters collaboration across internal teams, client IT environments, vendors, and carriers to expedite resolution.
• Conducts advanced data correlation and threat hunting across diverse sources—network traffic, email logs, malware samples, web server logs, DNS records—to uncover stealthy threats and improve detection capabilities.
• Leads strategic security projects, mentors junior engineers, and contributes to the evolution of the organization’s security posture through innovation and thought leadership.

Knowledge & Attributes:

• Multiple years experience of working in IT and/or Security Operation centers required. Experience in a Data Center environment an added plus.
• Advanced expertise in architecting, implementing, and optimizing SIEM and security platforms across hybrid environments. Demonstrated leadership in ICs and SCADA security integration and monitoring within critical infrastructure.
• Deep knowledge on security architecture, with hands-on experience designing and integrating multi-layered security solutions across diverse technology stacks.
• Strategic customer engagement mindset with a proactive approach to anticipating security needs, influencing stakeholders, and driving continuous improvement in service delivery.
• Recognized as a strategic problem solver with a track record of resolving complex security challenges independently and leading cross-functional teams through ambiguity.
• Exceptional attention to detail in high-stakes environments, ensuring precision in threat detection, incident response, and documentation that supports audit and compliance.
• Advanced analytical acumen with the ability to synthesize threat intelligence, correlate multi-source data, and drive actionable insights for risk mitigation.
• Polished spoken and written communication skills with English as the preferred language.
• Proven leadership in global security teams, fostering collaboration across departments, mentoring junior engineers, and driving alignment between security operations and business objectives.

Academic Qualifications & Certifications:

• Bachelor's degree or equivalent in Information Technology or related field.
• Relevant level of Security certifications such as CySA+, PenTest+, CCSP, GCIH, OSCP, CISM, CISSP etc. preferred.
• Relevant level of IT certifications such as CCNA, CCNP, RHCSA, GRID, GICSP, AZ-500, SC-200, etc. will be added advantage.

Required Experience:

• Advanced experience in Security technologies like (SIEM, PAM, IAM, PenTest, Threat Hunting, Firewall, Proxy etc.) preferably within a global IT services organization.

Who we are

As the third largest data center provider, we operate over 150 data centers in more than 20 countries and regions. We understand that every business – large and small – has its own unique needs and goals. We offer local-to-global data center expertise, aligned with our connected platform of AI-ready data centers to create solutions that enable our clients to seamlessly scale their digital businesses, anywhere and anytime.