SOC (CTI) - L3

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

The Security Managed Services Engineer (L3) is a seasoned engineering role, responsible for providing a service to clients by proactively identifying and resolving technical incidents and problems.

Through pre-emptive service incident and resolution activities, as well as product reviews, operational improvements, operational practices, and quality assurance this role will maintain a high level of service to clients.

The primary objective of this role is to ensure zero missed service level agreement (SLA) conditions and is responsible for managing tickets of high complexity, conducts advanced and complicated tasks, aware of client's high level and low-level security architecture and provides resolution to a diverse range of complex problems.

This position uses considerable judgment and independent analysis within defined policies and practices and applies analytical thinking and deep technical expertise in achieving client outcomes, while coaching and mentoring junior team members across functions.

The Security Managed Services Engineer (L3) may also contribute to / support on project work as and when required.

What You'll Be Doing

• Conduct daily threat hunting to identify advanced threats that evade traditional rules or signatures.
• Utilize analytical models to analyze log sources, including:
• Web Proxy
• Firewall
  
  

• Windows Servers
• Web Application Firewall (WAF)
• Intrusion Prevention System (IPS)
• Endpoint Detection and Response (EDR)
• SIEM
• CTI Tool
  

Analytical Models:

• Detect malware beaconing
• Identify lateral movement (host and port access)
• Monitor User Behavior Analytics (UBA) for VPN and RDP logins
• Detect unauthorized website access through autonomous behavior analysis
• Identify data exfiltration using UBA
• Detect network and application attacks
• MITRE Mapping and Framework Adoption
  
  

Reporting:

• Generate daily and weekly threat hunting reports with actionable threats and recommendations for mitigation and response.
• Develop new analytical models to address evolving global threats.
  
  

Workplace type:

On-site Working

About NTT DATA

NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.