MS Engineer (L4): Cyber Security

NTT DATA, Inc.Job description
Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

The NTT Managed Services Team is a dynamic and high performing team supporting NTT’s client in a Managed / Outsourced Environment.

Your role is to perform a variety of Endpoint security, vulnerability management, Security Incident response based engineering activities to enable the delivery of complete Integrated Services Management across all ITIL disciplines, being Incident-Request-Problem-Configuration-Change-Release Management.

This includes applying your analytical, reasoning & specialised technical expertise to investigate, isolate and rectify security incidents, identify root causes and undertake problem management activities. You will also be required to use these same skills to implement complex, large scale network changes within a structured change management framework, to perform release management and configuration management tasks in line with an ITIL compliant operations delivery structure.

To do this you will need to acquire a solid understanding of the NTT’s Integrated Services Management Operation “end-to-end”, to gain a thorough understanding of the customer’s specific business operations and how these apply to each of the specific ITIL disciplines. It is this specific customer knowledge that will assist you to fulfil your duties and ensure you are an effective and autonomous member of the team.

You will need to demonstrate a high level of commitment, initiative and ability in your work. You should be a motivated self-starter with proven abilities to get the job done. You should possess excellent communication skills, a strong IT background and be able to use these skills to deliver services within the ITIL Integrated Services Management environment.

You will also be required to perform system changes outside of normal business hours within time frames that are specified to reduce disruption to the customers business.

What You'll Be Doing

Key Responsibilities:

Accept, manage and update service requests to ensure contracted Service Level Agreements are met.
Provide remote and onsite technical support within Managed Services’ ITIL aligned service delivery processes including Incident Management, Problem Management, Configuration Management, Change Management and Release Management.
Manage, own and co-ordinate the technical resolution of incidents either remotely or onsite utilizing Field Engineering resources.
Plan, coordinate and implement complex Endpoint security changes within customer specified change windows, adhering to a predefined ITIL change management framework. This will include liaising with the customer, third party suppliers, vendors and partners to ensure minimal disruption to the customer’s day-to-day business operations, and the provision of seamless, coordinated delivery of services.
Incident analysis and response: Assisting SOC analysts by providing guidance and support in analysing security events, investigating incidents, and responding to cyber threats and attacks.
Threat intelligence analysis: Collaborating with other teams or external threat intelligence providers to gather, analyse, and interpret threat intelligence to identify emerging threats and implement proactive measures. Research and recommend mitigation strategies for current and future threats relevant to the Clients environment.
Compliance and regulatory requirements: Ensuring that SOC operations align with applicable standards, regulations, and best practices, such as ISO 27001, NIST, PCI DSS, or industry-specific compliance requirements.
Incident reporting and communication: Preparing reports and communicating security incidents, vulnerabilities, and findings to stakeholders, management, and internal or external auditors as necessary.
Where necessary, liaise and work with Professional Services Engineers and Solutions Architects around client projects and deployments.
Maintain detailed knowledge of the clients’ environment(s), where applicable, by maintaining and updating relevant documentation such as Diagrams, Configuration along with the process and procedural documentation.
Managing stakeholder expectations and assisting in the reduction of the impact of a cybersecurity event or incident.
Provide proactive, constant and clear communication on the status of incident/problem resolution between the client, NTT, and any other third party supplier and vendors.
Escalate issues affecting the delivery of service to management.
Understand and manage the requirements of being part of a shift hand-over, operational advice, guidance, support and escalation.
Understand the scope, delivery mechanisms and processes of all relevant EndPoint Security Services delivered by Managed Services.
Triage and manage security alerts across various platforms including the Azure Defender portal, Security centre, and Sentinel.
Review overnight all priority Sentinel alerts, raise ticket if any required Ops teams actions. Triage MDR tickets and reassign to relevant internal operations teams.
Read & understand actionable information from the M365 service alerts/health incidents/advisory related to Defender (Major updates from Message centre).
Prioritize and address high-severity threats, ensuring rapid response to vulnerabilities.

Job Requirements:

Mandatory