Senior Information Security Incident Response Analyst

NTT Ltd.; United States; Remote; USD 140,000 - 170,000; Full time

Job summary

NTT DATA is seeking a Senior Information Security Incident Response Analyst to lead complex investigations across host, disk, memory, network, cloud, and mobile environments. The role focuses on root cause, containment guidance, and clear communication of findings to technical and executive stakeholders.

You will mentor junior responders, contribute to process improvement, and collaborate with internal teams and external partners while maintaining strong client engagement during incidents.

Qualifications

• Hands-on experience in digital forensics and incident response across host, disk, memory, network, cloud, and mobile environments.
• Experience with SIEM, EDR, IDS/IPS, packet analysis utilities, and forensic toolsets.
• Ability to analyze network traffic with Wireshark or tcpdump to distinguish normal vs. malicious behavior.
• Experience in cybersecurity consulting, DFIR services, or related security roles.

Responsibilities

• Investigates security incidents across host, disk, memory, network, cloud, and mobile forensics.
• Analyzes artifacts across Windows, Linux, macOS and reconstructs event timelines.
• Guides containment, eradication, and recovery with clear recommendations.
• Acts as senior escalation point and mentors junior analysts.
• Participates in on-call rotation to support urgent incidents.
• Completes tabletop exercises, IR readiness engagements, and environment hardening reviews.
• Identifies gaps and weaknesses and recommends risk reduction.
• Produces documentation, investigation notes, status updates, and final reports.
• Collaborates with global DFIR teams and keeps abreast of threats and methods.

Skills

Digital forensics

Incident response

Network forensics

Cloud forensics

Memory forensics

Mentoring

Stakeholder communication

Education

Bachelor’s degree in IT / CS / Cybersecurity

GIAC/GCIH/GCIA certifications

Tools

SIEM

EDR

Wireshark

tcpdump

Forensic toolsets

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

The Senior Information Security Incident Response Analyst leads complex incident investigations and digital forensic analysis for clients across diverse environments. This role focuses on determining root cause and impact, guiding clients through containment and remediation, and clearly communicating technical findings to both technical and executive stakeholders.

The analyst serves as a senior escalation point, mentors and trains junior responders, and contributes to maturing team processes, workflows, and response capabilities. They collaborate with internal teams and external partners while maintaining strong, professional client engagement throughout each incident.

Key Responsibilities

• Investigates security incidents for clients by performing host, disk, memory, network, cloud, and mobile forensics.
• Conducts detailed artifact analysis across Windows, Linux, and macOS systems and reconstructs event timelines using disk images, memory captures, network data, and cloud logs.
• Guides clients through containment, eradication, and recovery activities, providing clear technical recommendations and communications.
• Acts as a senior escalation point for complex incidents and supports the development and mentoring of junior analysts.
• Participates in an on‑call rotation to support urgent, time‑sensitive incident response needs.
• Completes internal and client project work such as tabletop exercises, IR readiness engagements, environment hardening reviews, and forensic assessments.
• Identifies gaps and weaknesses in client environments and provides recommendations to reduce risk and strengthen posture.
• Produces accurate, concise documentation, including investigation notes, status communications, and final reports.
• Collaborates with global DFIR and cyber defense teams and maintains awareness of current threats, tactics, and forensic methodologies.

Knowledge and Attributes

• Advanced knowledge of digital forensics, including disk and memory image analysis across Windows, Linux, and macOS platforms.
• Strong understanding and experience with network forensics, cloud forensics (Azure, AWS, GCP) and mobile forensics (iOS/Android).
• Ability to communicate complex technical findings clearly to both technical and non‑technical client stakeholders.
• Strong analytical, critical thinking, and problem‑solving abilities during high‑pressure investigations.
• Capable of mentoring junior responders and supporting continuous improvement of DFIR capabilities.

Required Experience

• Significant hands‑on experience in digital forensics and incident response across host, disk, memory, network, cloud, and mobile environments.
• Advanced experience using SIEM, EDR, IDS/IPS, packet analysis utilities, and forensic toolsets in active investigations.
• Advanced ability to analyze network traffic using tools such as Wireshark or tcpdump to distinguish normal and malicious behavior.
• Experience working in cybersecurity consulting, DFIR services, or equivalent technical security roles.

Academic Qualifications and Certifications

• Bachelor’s degree or equivalent in Information Technology, Computer Science, Cybersecurity, or a related discipline (preferred).
• Relevant GIAC or equivalent certifications such as: GSEC – Security Essentials GCIA – Certified Intrusion Analyst GCIH – Certified Incident Handler
• Additional DFIR‑related certifications are considered a plus.

Workplace type:

Remote Working

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us.