Remote Incident Response Lead - Cyber Security

NTT DATA, Inc.; México; Remote; MXN 700,000 - 1,300,000; Full time

Job summary

NTT DATA, Inc. is seeking an Information Security Incident Response Manager to join our team remotely in Mexico. The role focuses on leading incident response, triaging security alerts, and coordinating with global cyber security teams.

You will drive containment, investigation and root cause analysis, while aligning with risk management and security policy. Strong communication with technical and non-technical stakeholders is essential.

Qualifications

• Bachelor’s degree or equivalent in Information Technology, Computer Science or related preferred.
• SANS GIAC Security Essentials (GSEC) or equivalent preferred.
• SANS GIAC Certified Intrusion Analyst (GCIA) or equivalent preferred.
• SANS GIAC Certified Incident Handler (GCIH) or equivalent preferred

Responsibilities

• Manages the prevention and resolution of security breaches and ensure incident and problem management processes are initiated.
• Performs access management activities according to the policy.
• Implements and discusses security service audit schedules, review access authorization and perform the required access controls and testing to identify security weaknesses.
• Interacts with a global team of Cyber Security Analysts and specialists.
• Manages 2nd level triaging of security alerts, events, and notifications.
• Communicates status of response, resolution and final root cause analysis to the appropriate stakeholders.

Skills

Incident response

SIEM

EDR

Risk management

Stakeholder comms

Cross-functional teams

Education

Bachelor’s degree in IT/CS

SANS GIAC Security Essentials (GSEC)

SANS GIAC Certified Intrusion Analyst (GCIA)

SANS GIAC Certified Incident Handler (GCIH)

Tools

SIEM

IPS

Wireshark

tcpdump

Job description

NTT DATA, Inc. is seeking an Information Security Incident Response Manager to join our team remotely in Mexico. The role focuses on leading incident response, triaging security alerts, and coordinating with global cyber security teams.

You will drive containment, investigation and root cause analysis, while aligning with risk management and security policy. Strong communication with technical and non-technical stakeholders is essential.