Join NTT DATA as a Senior Analyst in Security Center Operations. This role involves applying advanced security principles and analytical skills to diverse and complex challenges. You will be instrumental in crafting formal documentation, including reports and architectural diagrams.

This position requires active participation in incident response efforts and the creation of crucial content like queries and dashboards within leading SIEM tools such as Splunk. You will also contribute to SOC engineering, including tool integration, automation development, and evaluating new technologies to enhance our security posture.

Responsibilities include resolving client issues through effective corrective actions and escalation procedures, utilizing ticketing systems and standard operating procedures to meet client Service Level Agreements (SLAs). You will perform essential shift duties, including reporting and monitoring, and assess the type and severity of security events using packet analysis and a deep understanding of exploits and vulnerabilities.

Your expertise will be crucial in communicating technical information to both NTT DATA's client base and internal technical teams. We encourage knowledge sharing among analysts to develop efficient customer solutions and maintain up-to-date knowledge of local security policies and general controls.

- Lead and/or assist incident response efforts. - Create content (queries, dashboards, reports, etc.) in industry-leading SIEM tools, such as Splunk. - Support and participate in SOC engineering efforts, including tool integration, automation development, and evaluation of new technologies. - Make recommendations for improving procedures and resolve client issues by taking appropriate corrective action or following escalation procedures. - Utilize ticketing systems and standard operating procedures for effective call processing and escalation to adhere to client Service Level Agreements (SLAs). - Perform all required shift tasks, including reporting, monitoring, and turnover logs. - Evaluate the type and severity of security events using packet analyses and in-depth understanding of exploits and vulnerabilities. - Confidently communicate technical information to clients and internal technical teams. - Participate in knowledge sharing with other analysts and develop efficient customer solutions. - Maintain a working knowledge of local security policies and execute assigned general controls.

- Bachelor's degree in a related field, such as Computer Science, or an equivalent combination of education and experience. - 2-4 years of experience with SIEM or Splunk Enterprise Security. - 5-7 years of relevant overall work experience. - Strong written and verbal communication skills. - Proven experience in writing/creation of formal documentation such as reports, slide decks, and architecture diagrams. - Demonstrated root cause analysis and investigative problem-solving skills. - Customer service/support experience is essential. - Familiarity with Unix/Linux operating systems. - Working knowledge of applicable industry controls, such as NIST 800-53. - SIEM certification (e.g., Securonix, Splunk, Palo Alto XIEM) or Security+, SSGB, ITIL certifications are highly desirable. - Coding or scripting experience is a plus.