Senior Information Security Analyst

nttlimited; Hyderabad; On-site; INR 900,000 - 1,300,000; Full time

Job summary

NTT DATA is seeking an experienced Managed Services Information Security Analyst in Hyderabad to monitor, analyze and report on client data for delivering security insights and recommendations. You will engage with security tools, perform incident handling, threat hunting and client interactions as part of a global CDC team.

The role requires strong SIEM and security infrastructure knowledge, coordination with client stakeholders, and continuous improvement of security services.

Qualifications

• Seasoned experience in SOC Analysis Operations.
• Seasoned experience in SIEM usage for investigations.
• Seasoned experience in security technologies such as Firewall, IPS, IDS, Proxy.
• Experience dealing with technical support to clients.
• End-to-end security incidents handling.

Responsibilities

• Works in a 24/7 Global CDC team on rotating shifts.
• Tune MSSP platform and client SIEM with stakeholders to improve detection and reporting.
• Monitor and analyze security logs from client environments.
• Suggest improvements to security tools and processes for clients and teams.
• Follow SOPs and Run Books; propose changes for consistent global delivery.
• Document best practices and update documentation as required.
• Identify automation opportunities to assist clients and delivery teams.
• Handle security incidents using EDR, EPP, malware analysis, forensics.
• Apply knowledge of LAN, Windows, Linux, and security infra.
• Use knowledge articles for diagnosis and resolution; update as needed.
• Inform and monitor service delivery against SLAs; maintain records.
• Undertake threat hunting across client estates and cross-client scope.
• Manage unresolved incidents and ensure resolution.
• Support client delivery teams and collaborate with colleagues.
• Share knowledge to build cohesive team and deliver value to clients.
• Perform other related tasks as required.
• Interact with customers in bridge calls to address security queries.
• Understand threat hunt methodologies and perform threat hunting.

Skills

SOC Analysis

Security monitoring

Threat hunting

Incident handling

Analytical thinking

Communication

Team collaboration

Problem solving

Education

Bachelor's degree in IT or Computing

Security certifications (AZ-500, SC-200, CISSP, CEH)

Tools

SIEM platform

Firewall/IDS/IPS

EDR/Threat Intelligence tools

SOAR

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it's a place where you can grow, belong and thrive.

Your day at NTT DATA

The Managed Services Information Security Analyst is a seasoned subject matter expert, responsible for working with security tools and other security teams to monitor, analyze, interpret and report on the incoming client data for the purpose of delivering security information and recommendations to the clients, enabling the organization to deliver the contracted security services.

This role includes performing tasks such as security incident detection and response, security event reporting, threat hunting, content maintenance (tuning) and interacting with clients to ensure their understanding of the information generated, recommending client system changes as well as answering security related queries from the clients.

What you'll be doing

Key Responsibilities:

• Works as part of a global Cyber Defense Centre (CDC) team that works 24/7 on rotational shifts.
• Works with client stakeholders and relevant internal teams to tune the MSSP platform and client SIEM to enable more efficient detection, analysis and reporting.
• Monitors security tools to review and analyze security logs from client environments.
• Generates continuous improvement ideas for supported security tools/technologies, to enable improvements to the company services, employee experience and client experience.
• Adheres to SOPs, customer Run Books and standard processes to ensure a globally consistent delivery whilst also proposing changes and improvements to these standards.
• Utilizes and documents best practices and amends existing documentation as required.
• Identifies opportunities to make automations which will help the clients and security delivery teams.
• Performs security incident handling and response from several vectors including End Point Protection and Enterprise Detection and response tools, attack analysis, malware analysis, network forensics, computer forensics.
• Utilizes a broad range of skills in LAN technologies, Windows and Linux O/S's, and general security infrastructure.
• Ensures usage of knowledge articles in incident diagnosis and resolution and assists with updating as and when required.
• Performs defined tasks to inform and monitor service delivery against service level agreements and maintain records of relevant information.
• Undertakes threat hunting activities across both individual client estates, as well as cross client hunting.
• Manages unresolved incidents and follows up until incidents are resolved.
• Works closely with client delivery teams to support their activities related to client delivery.
• Cooperates closely with colleagues to share knowledge and build a cohesive and effective team environment, benefiting the individual, the business and the client.
• Performs any other related task as required.
• Customer interactions and attending bridge calls to work with customers and relative technical teams.
• Understanding of threat hunt methodologies and perform threat hunting.

Knowledge and Attributes:

• Seasoned knowledge on implementation and monitoring of a company supported SIEM or security tools/technologies/concepts.
• Seasoned knowledge on security architecture, worked across different security technologies.
• Seasoned knowledge and understanding of the operation of modern computer systems and networks and how they can be compromised.
• Displays excellent customer service orientation and pro-active thinking.
• Displays problem solving abilities and is highly driven and self-organized.
• Excellent attention to detail.
• Excellent analytical and logical thinking.
• Excellent spoken and written communication abilities.
• Team player with the ability to work well with others and in group with colleagues and stakeholders.
• Ability to remain calm in pressurized situations.
• Ability to keep current on emerging trends and new technologies in area of specialization.

Academic Qualifications and Certifications:

• Bachelor's degree or relevant qualification in Information Technology or Computing or a related field.
• Security certifications such as (but not limited to) AZ-500, SC-200, Security+, CEH, CISSP, CISM or similar Certification in different networking technologies such as CCNA, JNCIA, ACCA, PCNSA, CCSA is advantageous.

Required Experience:

• Seasoned experience in SOC Analysis Operations.
• Seasoned experience in SIEM usage for investigations.
• Seasoned experience in Security technologies such as (but not limited to) Firewall, IPS, IDS, Proxy.
• Seasoned experience in dealing with technical support to clients.
• Seasoned experience in handling security incidents end to end.
• Seasoned experience in configuring/managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots and other secu