Principal Information Security Specialist - Threat Intelligence
NTT DATA Global Delivery Services Ltd
Work from Office
Full Time
Min. 5 yearsJob Description
The Principal Information Security Specialist, Threat Intelligence
Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.
The Principal Information Security Incident Response Analyst is a highly skilled subject matter exper, responsible for providing an escalation path for Level 1 and 2 workflows for high-risk incidents.
Additionally, this role facilitates proactive security measures through analytics and threat hunting processes and is responsible for detecting and monitoring escalated threats and suspicious activity affecting company technology domain (servers, networks, appliances and all infrastructure supporting production applications for the enterprise, as well as development environments).
This role is responsible to manage critical and high-risk exposures in the daily operation of real-time threat management activities.
This senior technical resource facilitates problem resolution and mentoring for the overall team. This includes operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning).
- Manages weekly sprints in Threat Hunting analytics.
- Manages the processing of security alerts, events, and notifications (e.g. via email, ticketing, virus warning, intelligence feeds, workflow, etc.).
- Manages the notification of internal and/or external teams according to agreed alert priority levels, and escalation trees.
- Monitors events for suspicious events, investigation, and escalate where applicable.
- Maintains an understanding of current and emerging threats, vulnerabilities, and trends.
- Prioritizes threat analysis based on risks associated with each threat and working with the appropriate teams to ensure related communications are in line with company best practice and recommendations.
- Acts as the primary technical lead for the Computer Incident Response Team (CIRT), coordinating the work of technical staff from various departments, as well as the work of third-party technical experts.
- Ties third party attack monitoring services and threat reporting services, into internal CIRT communications systems, so as to better alert CIRT team members about what’s coming, and what preparations to undertake before production systems at NTT Ltd are damaged (and what remedial actions to take after damage has taken place).
- Regularly reviews the current configurations of NTT Ltd production information systems and networks, with an eye towards the steps that attackers must take to break through existing defenses, and recommends configuration changes, system setting changes, network topology changes, and other modifications that would enhance the overall level of security.
- Designs, specifies, programs, deploys, and fine-tunes custom software which analyses the vast amount of log, audit trail, and other recorded activity information that modern systems record, so as to be able to immediately detect unauthorized activity, most importantly intrusion by unauthorized parties and the execution of unauthorized software.
- Designs automated scripts, automated contingency plans, and other programmed responses which are launched when an attack against company systems has been detected.
- Designs, specifies, programs, debugs, and oversees the work of others related to middleware, and other system integration tools, which tie multiple security monitoring systems together so as to better meet company information security needs.
- Performs post-mortem analyze with logs, network traffic flows, and other recorded information to identify intrusions by unauthorized parties, as well as unauthorized activities of authorized users.
- Reviews incident and problem management reports to identify potential security weaknesses and perform an impact and risk analysis, developing recommendations for highlighted risks, ensuring that these risks and solutions are presented to the relevant stakeholders.
- Ensures that security service audit schedules are developed, scoped, discussed and agreed with the business.
- Reviews access authorization for compliance with policy, administration security controls for effectiveness, security on the operational systems and verify that security monitoring is working.
- Ability to remain calm and focused during stressful situations.
- Ability to listen and adapt to changing situations.
- Ability to recognize potential problems and take steps to fix the issues.
- Extended understanding of complex inter-relationships in an overall system or process.
- Extended knowledge of technological advances within the information security arena.
- Demonstrates analytical thinking and a proactive approach.
- Displays consistent client focus and orientation.
- Extended knowledge of information security management and policies.
- Extended understanding of current and emerging threats, vulnerabilities, and trends.
- Extended understanding of malware forensics, network forensics, and computer forensics also highly desirable.
- Ability to statically and dynamically analyze malware to determine target and intention.
- Ability to uncover and document tools, techniques, procedures used by cyber adversaries in attacking managed infrastructure.
- Sound decision making abilities with demonstrate teamwork and collaboration skills.
- Displays good planning and organizing ability.
- Bachelor’s degree or equivalent in Information Technology, Computer Science or related field.
- SANS GIAC Security Essentials (GSEC) or equivalent preferred.
- SANS GIAC Certified Intrusion Analyst (GCIA) or equivalent preferred.
- SANS GIAC Certified Incident Handler (GCIH) or equivalent preferred.
- Industry certifications such as CISSP, CISM, CISA, CEH, CHFI preferred.
- Information Technology / ITILSM / ICT Security / ITIL v3 preferred.
- Extended experience in a Technology Information Security Industry.
- Extended experience working in a SOC/CSIRT.
- Extended experience or knowledge of SIEM and IPS technologies.
- Extended experience with Wireshark, tcpdump, Remnux, decoders for conducting payload analysis.
- Extended experience in building SIEM rules and/or indicators of compromise for threat detection.
Workplace type:
Hybrid WorkingAbout NTT DATA
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune
Global 100. We are committed to accelerating client success and positively impacting society through
responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with
unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and
application services. Our consulting and industry solutions help organizations and society move
confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more
than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as
established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each
year in R&D.
Equal Opportunity Employer
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.
Third parties fraudulently posing as NTT DATA recruiters
NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.
Experience Level
Senior LevelJob role
Job requirements
About company
Similar jobs you can apply for
Hardware & Network Engineer
Laptop Technician
Armee Infotech
Field JobFull TimeMin. 6 months
No English RequiredInstallation Engineer
AirtelField JobFull TimeAny experienceNo English RequiredField Installation Engineer
V5 GlobalField JobFull TimeAny experienceBasic English
Hardware Engineer
Karla Electronics Inc.Work from OfficeFull TimeAny experienceBasic English
Laptop Repair Technician
Jaya Surya ComputersField JobFull TimeAny experienceBasic English
Laptop Repair Technician
Techsoft Systems and LaptopsWork from OfficeFull TimeAny experienceNo English RequiredYou can expect a minimum salary of 0 INR. The salary offered will depend on your skills, experience and performance in the interview.
The candidate should have completed the required education and people who have 5 to 31 years are eligible to apply for this job. You can apply for more jobs in Bengaluru/Bangalore to get hired quickly.
The candidate should have sound communication skills and sound communication skills for this job.
Both Male and Female candidates can apply for this job.
No, it's not a work from home job and can't be done online. You can explore and apply for other work from home jobs in Bengaluru/Bangalore at apna.
No work-related deposit needs to be made during your employment with the company.
Go to the apna app and apply for this job. Click on the apply button and call HR directly to schedule your interview.
The last date to apply for this job is . For more details, download apna app and find Full Time jobs in Bengaluru/Bangalore . Through apna, you can find jobs in 64 cities across India. Join NOW!