Information Security Specialist-2

NTT DATA, Inc.; Bengaluru; Hybrid; INR 1,200,000 - 2,500,000; Full time

Benefits offered by this job

Hybrid Working

Global exposure

Job summary

NTT DATA, Inc. is seeking a security engineering professional to deploy and manage NextGen SIEM, SOAR, and EDR capabilities in a hybrid Bengaluru environment.

You will work hands-on with Linux/Windows, create playbooks, and implement policies for privileged accounts and cloud compliance. The role involves SOC/CSIRT operations, firewall/IDS/IPS management, and integrating security tools across cloud environments.

Qualifications

• Bachelor's degree in Information Technology or related field.
• Cloud certifications (AWS/Azure/GCP) preferred.
• Security certifications (AZ-500, SC-200, Security+, CEH, CISSP, CISM) an advantage.

Responsibilities

• Configure, deploy, and manage NextGen SIEM, SOAR, EDR.
• Hands-on with Linux and Windows operating systems.
• API integration and authentication experience.
• Create playbooks, correlation rules, dashboards, and workflows.
• Oversee JIT and privileged access management; monitor non-human accounts.

Skills

Security engineering

SOC/CSIRT operations

Firewall/IDS/IPS

Remote support

Networking basics

Education

Bachelor's degree in IT

Cloud certifications (AWS/Azure/GCP)

Security certifications (AZ-500, CISSP, etc.)

Tools

CrowdStrike

Qualys

Falcon Privileged Access

CASM/Policy Compliance reports

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Key Responsibilities

• Configuring, deploying, and managing experience with NextGen SIEM, SOAR, EDR
• Hands-on experience with Linux and Windows operating systems.
• Experience with API integration and authentication.
• Creating playbooks, correlation rules, dashboards, and workflows to manage.
• Non-Human & Privileged Access Control: Oversee JIT (just-in-time) access via Falcon Privileged Access, manage standing privileges, and monitor non-human/service account hygiene
• Policy Configuration & Customization: : Create and maintain Zero Trust and conditional access policies for privileged accounts, service/non-human accounts, stale accounts, risky logins
• Compliance Framework Mapping: Enabling and assigning compliance benchmarks out of the box (e.g., CIS Benchmarks, NIST, PCI-DSS, SOC2, HIPAA) to specific cloud groups or accounts.
• Custom Policy Creation: Building tailored posture policies to catch non-standard infrastructure risks
• Deployment and administration tasks in CrowdStrike (Containers scans, CI/CD image scanning)
• Knowledge of CASM /Policy Compliance reports, container security within DevOps, deploying passive network sensors, and cloud connectors in Qualys.
• Troubleshooting experience in Linux, firewalls, Python scripts, AD logs, and system logs.
• Troubleshooting security agent deployment and systems that aren't reporting in tools UI.
• Troubleshooting system performance issues due to security agent deployment.
• Create IOA/IOC/ML exclusions and USB exceptions and block IOCs in security tools.

Academic Qualifications and Certifications

• Bachelor's degree or equivalent in Information Technology or related field.
• Relevant level of Cloud certifications such as AWS, AZURE, GCP preferred.
• Relevant level of Security certifications such as AZ-500, SC-200, Security+, CEH, CISSP, CISM etc. will be added advantage.

Required experience

• Extended experience in Security technologies like (Firewall, IPS, IDS, Proxy etc.).
• Extended experience in technical support to clients.
• Extended experience in diagnosis and troubleshooting.
• Extended experience providing remote support in Security Technologies.
• Extended experience in SOC/CSIRT Operations.
• Extended experience in handling security incidents end to end.
• Knowledge on networking, Linux and security concepts.
• Extensive experience in configuring/managing security controls such as Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, HoneyPots and other security tools.
• Knowledge on log collection mechanism such as Syslog, Log file, DB API.
• Knowledge in security architecture.
• Extensive experience in Security Engineering.

Workplace type

Hybrid Working

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune
Global 100. We are committed to accelerating client success and positively impacting society through
responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with
unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and
application services. Our consulting and industry solutions help organizations and society move
confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more
than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as
established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each
year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us.