Hybrid Senior Associate, Security Platform Engineer

at NTT DATA, Inc.

• Job title: Senior Associate, Security Platform Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Linux
• Location requirements: Hybrid, Bangalore, India

About the role

• Senior Associate Security Platform Engineer monitoring security incidents for leading technology services provider NTT DATA. Collaborating with a 24/7 team on incident response and security tool management.

Responsibilities

• Works as part of a 24/7 team working on rotational shifts.
• Works as part of Platform and Content Engineering handling tunings, stake holder requests, escalations, reporting, trainings.
• Administers the organization's security tools to gather security logs from environment.
• Lifecycle management of the supported security tools/technologies, Break-fix, Patching, Live update.
• Adheres to SOPs and notify stake holders on log flow/log format issues.
• Documents best practices.
• Identifies opportunities to make automations which will help the incident response team.
• Performs security incident handling and response from several vectors including End Point Protection and Enterprise Detection and response tools, attack analysis, malware analysis, network forensics, computer forensics, and a broad range of skills in LAN technologies, Windows and Linux O/S’s, and general security infrastructure.
• Carries out agreed maintenance tasks.
• Ensures usage of knowledge articles in incident diagnosis and resolution and assist with updating as and when required.
• Performs defined tasks to monitor service delivery against service level agreements and maintains records of relevant information.
• Investigates causes of incidents and seeks resolution.
• Escalates unresolved incidents and follow up until incident is resolved.
• Provides service recovery, following resolution of incidents.
• Document and close resolved incidents according to agreed procedures.

Requirements

• Bachelor's degree or equivalent in Information Technology or related field
• Relevant level of Networking certifications such as CCNA, JNCIA, ACCA, PCNSA, CCSA etc. preferred.
• Relevant level of Security certifications such as AZ-500, SC-200, Security+, CEH, CISSP, CISM etc. will be added advantage.
• Moderate level experience in Security technologies like (Firewall, IPS, IDS, Proxy etc.).
• Moderate level experience in technical support to clients.
• Moderate level experience in diagnosis and troubleshooting.
• Moderate level experience providing remote support in Security Technologies.
• Moderate level experience in SOC/CSIRT Operations.
• Moderate level experience in handling security incidents end to end.
• Knowledge on networking, Linux and security concepts.
• Moderate level experience in configuring/managing security controls such as Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, HoneyPots and other security tools.
• Knowledge on log collection mechanism such as Syslog, Log file, DB API.
• Knowledge in security architecture.
• Moderate level experience in Security engineering.

Benefits

• Hybrid Working
• Professional development opportunities