SOC Analyst L2

NTT DATA, Inc.; Delhi; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

NTT DATA, Inc. in Delhi is seeking a Security Managed Services Engineer (L2) to provide managed service to clients. The role involves proactive monitoring, incident management, and collaborating on project work. Ideal candidates will have a BE/BTech in a relevant field, at least one security certification, and over 5 years experience in security products and services. The position emphasizes proactive resolution without breaching SLAs, with a focus on on-site work, ensuring client's security systems remain operational.

Qualifications

• Minimum overall 5 years of experience in handling security related products & services; 3 years in SIEM solution.
• At least one security certification such as CCNA Security, CCSA, CEH.
• Knowledge of security devices: firewalls, IPS, WAF, DDOS, EDR.

Responsibilities

• Monitors client infrastructure and solutions.
• Identifies problems and errors prior to or when they occur.
• Investigates first line incidents assigned and identifies the root cause of incidents.

Skills

Proactive monitoring

Technical troubleshooting

Incident management

Automation and process improvement

Knowledge of networking protocols

Education

BE/BTech in Electronics/EC/EE/CS/IT Engineering or MCA

Tools

SIEM solutions (RSA NetWitness, Splunk ES, etc.)

Security certifications (CCNA Security, CCSA, CEH, etc.)

Job description

Your day at NTT DATA

The Security Managed Services Engineer (L2) is a developing engineering role, responsible for providing a managed service to clients to ensure that their Security Infrastructures and systems remain operational.

Through the proactive monitoring, identifying, investigating, and resolving of technical incidents and problems, this role is able to restore service to clients.

Primary objective is to proactively review client requests or tickets and apply technical/process knowledge to resolve them without breaching SLA and focuses on second‑line support for incidents and requests with a medium level of complexity.

The Security Managed Services Engineer (L2) may also contribute to / support on project work as and when required.

Responsibilities

• Monitors client infrastructure and solutions.
• Identifies problems and errors prior to or when they occur.
• Routinely identifies common incidents and opportunities for avoidance as well as general opportunities for incident reduction.
• Investigates first line incidents assigned and identifies the root cause of incidents and problems.
• Provides telephonic or chat support to clients when required.
• Schedules maintenance activity windows for patching and configuration changes.
• Follows required handover procedures for shift changes to ensure service continuity.
• Reports and escalates incidents where necessary.
• Ensures efficient and comprehensive resolutions of incidents and requests.
• Updates existing knowledge articles or creates new ones.
• Identifies opportunities for work optimization including automation and process improvement.
• May also support on project work as and when required.
• May work on implementing and delivering Disaster Recovery functions and tests.
• Performs any other related task as required.

Qualifications

• Academic Qualifications: BE/BTech in Electronics/EC/EE/CS/IT Engineering or MCA.
• At least one security certification such as CCNA Security, CCSA, CEH, CompTIA, GCIH/GCIA.
• At least one SIEM solution certification with one or more SIEM/ Security solutions (RSA NetWitness, Splunk ES, Elastic ELK, HP ArcSight, IBM QRadar Log Rhythm).
• Minimum overall 5 years of experience in handling security related products & services; 3 years in SIEM solution.
• Knowledge of security devices: firewalls, IPS, WAF, DDOS, EDR, Incident response, SOAR.
• Administration of SIEM environment: deployment, user management, license management, upgrades, patch deployment, log source management, configuration, change, report management, backup and recovery.
• Construction of SIEM content: filters, active lists, correlation rules, reports, templates, queries, trends, variables.
• Integration of customized threat intelligence content feeds from Threat Intelligence & Analytics service.
• Identifies sensor improvements, collects/updates threat intelligence feeds, creates situational awareness briefings, coordinates incident analysis, containment, remediation.
• Liaises with Security monitoring team to discover repeatable processes leading to new content development.
• Provides engineering analysis and architectural design of technical solutions.
• Knowledge of networking protocols, technologies and network security.
• Sound analytical and troubleshooting skills.

Workplace Type

On‑site Working

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category.