Principal Information Security Analyst

NTT DATA, Inc.; Johannesburg; Hybrid; ZAR 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Hybrid Working

Job summary

NTT DATA is seeking a Principal Information Security Analyst to drive platform evolution, integration support, and automation across the security stack. You will lead architecture reviews, build and upgrade security tooling, and mentor the SOC engineering team.

Required are 14+ years in security, strong SIEM/SOAR experience, and DevOps proficiency with Python and cloud security know-how in Azure and Google Cloud. Hybrid work arrangements apply.

Qualifications

• 14+ years of experience in security.
• Extensive experience with SIEM, SOAR, EDR, XDR and cloud security services.
• 5+ years in DevOps, scripting (Python), and query languages (KQL, XQL).

Responsibilities

• Lead and contribute as part of a Security Platform Engineering team.
• Design architecture for MSSP platform and oversee automation.
• Support new integrations design and build; review COTS capabilities.
• Lead tool evaluations, POCs, and lifecycle reviews.
• Mentor the team and coordinate with stakeholders on incidents and reporting.

Skills

SIEM

SOAR

XSIAM

Cloud security

DevOps

Python

KQL

Linux

Networking

Log analytics

Education

Bachelor's degree in Information Technology or related field

Tools

Azure

Google Cloud

MS Sentinel

PaloAlto XSIAM

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

The Principal Information Security Analyst is a highly skilled subject matter expert responsible for Platform evolution, Integration support, New COTS review/analysis, L4 Platform operations support and mentoring for the overall team. This includes Platform architecture design, regular architecture reviews, platform build & automation, integration design & build, tool evolution, Major platform upgrades, security event reporting, and content engineering.

Key Responsibilities:

• Lead and Works as part of a Security Platform Engineering team
• Responsible for the MSSP platform architecture designing
• Lead and build new service platform and automation for the SOC/security services
• Conduct architecture reviews and updates
• Support new integrations design and build
• Lead the new COTS capability review and analysis
• Lead the new tool evaluation and POC
• Act as the advisor and consultant for the Platform and Content Engineering,
• stake holder requests, escalations, reporting, trainings.
• Support the review of lifecycle management of the supported security tools/technologies, Break-fix, Patching
• Support in designing the SOPs and notify stake holders on log flow/log format issues.
• Documents best practices.
• Identifies opportunities to make automations which will help the incident response team.
• Documents and closes resolved incidents according to agreed procedures.
• Investigates and identifies root cause of major platform disruptions and assist with the implementation of agreed remedies and preventative measures.
• Cooperates with all stakeholders including vendors and carriers to expedite diagnosis of errors and problems and to identify a resolution.

Knowledge and Attributes:

• Extended knowledge on implementation and monitoring of MS sentinel, PaloAlto XSIAM, MS LogicApps, XSOAR, and/or other automation tools with Google SecOps (optional)
• Extended knowledge on security and SOC architecture, worked across different security technologies, DevOps & automation tools
• Good knowledge and experience on different cloud native services such as Azure, and Google
• Customer service orientated and pro-active thinking.
• Problem solver who is highly driven and self-organized.
• Great attention to detail.
• Good analytical and logical thinking.
• Excellent spoken and written communication skills.
• Team player and lead with the ability to work well with others and in group with colleagues and stakeholders.

Academic Qualifications and Certifications:

• Bachelor's degree or equivalent in Information Technology or related field.
• Relevant level of security certifications such as PaloAlto XSIAM engineer/Architect, Azure DevOps or equivalent, SC-100, DW-350, DW-360 or equivalent
• Relevant level of additional Security certifications such as AZ-500, CEH, CISSP, CISM etc. will be added advantage.

Required experience:

• 14 + years' experience in Security
• Extended experience in Security technologies like SIEM, SOAR, EDR, XDR, CDR, Cloud native security services and security architecture
• Minimum experience of 5 Years in DevOps, Scripting using Python, KQL and XQL
• Extended experience in technical support to clients.
• Extended experience in diagnosis and troubleshooting.
• Extended experience providing remote support in Security Technologies.
• Extended experience in SOC/CSIRT Operations.
• Knowledge on networking, Linux, Agentic AI/RAG and security concepts.
• Good understanding and experience in configuring/managing security controls such as Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, HoneyPots and other security tools.
• Knowledge on log collection mechanism such as Syslog, Log file, DB API.
• Extensive experience in Security Engineering.

Workplace type:

Hybrid Working

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us.

Third parties fraudulently posing as NTT DATA recruiters

NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an @nttdata.com email address. If you suspect any fraudulent activity, contact us.