SOC Analyst L2 - Incident Responder - #1709863

SOC Analyst (L2)

NTT DATA is one of the world’s largest global security service providers, partnering with some of the most recognized security technology brands. We’re looking for passionate, curious, and motivated individuals to join our team.

What you'll be doing:

The primary function of the SOC Analyst (L2) is to analyse any incidents escalated by the SOC Analyst (L1) and undertake the detailed investigation of the Security Event. The Security Analyst (L2) shall determine whether the security event will be classified as an incident. They will be coordinating with the customer IT and Security team for resolution of the Security Incident

Job Duties

• Security Monitoring: & Investigation:
  
  
  
  • Monitoring SIEM tools to assure high a level of security operations delivery function
  
  
  • Oversee and enhance security monitoring systems to detect and analyse potential security incidents.
  
  
  • Conduct real-time analysis of security events and incident and escalate as necessary
  
  
  • Support other teams on investigations into incidents, determining the root cause and impact.
  
  
  • Document findings and lessons learned to improve incident response procedures.
  
  
  • Ensure runbooks are followed and are fit for purpose
  
  
  
  


• Incident Response:
  
  
  
  • Lead and coordinate incident response activities to effectively contain, eradicate, and recover from security incidents.
  
  
  • Develop and maintain incident response plans, ensuring they align with industry best practices.
  
  
  • Escalation management in the event of a security incident
  
  
  • Follow major incident process
  
  
  
  


• Threat Intelligence:
  
  
  
  • Stay abreast of the latest cybersecurity threats and vulnerabilities, integrating threat intelligence into security monitoring processes.
  
  
  • Contribute to the development of threat intelligence feeds to enhance proactive threat detection.
  
  
  
  


• Security Tool Management:
  
  
  
  • Manage and optimise SIEM tools, ensuring they are properly configured and updated to maximize effectiveness.
  
  
  • Own the development and implementation of SOC Use Cases
  
  
  • Evaluate new security technologies and recommend enhancements to the security infrastructure.
  
  
  
  


• Collaboration:
  
  
  
  • Collaborate with cross-functional teams, including IT, legal, and management, to address security incidents and implement preventive measures.
  
  
  • Provide expertise and guidance to other analysts.
  
  
  • Working with the Technical Teams to ensure all new and changed services are monitored accordingly
  
  
  
  


• Documentation:
  
  
  
  • Maintain accurate and up-to-date documentation of security procedures, incident response plans, and analysis reports.
  
  
  • Create post-incident reports for management and stakeholders.
  
  
  • Support the creation of monthly reporting packs as per contractual requirements.
  
  
  • Create and document robust event and incident management processes, Runbooks & Playbooks
  
  
  
  


• Other responsibilities:
  
  
  
  • Involvement in scoping and standing up new solutions for new opportunities
  
  
  • Assisting Pre-Sales team with requirements on new opportunities
  
  
  • Demonstrations of SOC tools to clients
  
  
  • Continual Service Improvement - Recommendations for change to address incidents or persistent events.
  
  
  
  

What you'll bring:

• Must be able to obtain SC Clearance or already hold SC clearance.


• Must have a good understanding on Incident Response approaches


• Must have knowledge and hands-on knowledge of Microsoft Sentinel (or any SIEM tool).


• Strong verbal and written English communication.


• Strong interpersonal and presentation skills.


• Strong analytical skills

• Must have good understanding on network traffic flows and able to understand normal and suspicious activities.


• Must have good understanding of Vulnerability Scanning and management as well as Ethical Hacking (Penetration Testing)


• Ability to learn forensic techniques


• Ability to reverse engineer attacks to understand what actions took place.


• Knowledge of ITIL disciplines such as Incident, Problem and Change Management.


• Ability to work with minimal levels of supervision.


• Willingness to work in a job that involves 24/7 operations or on-call.

Education Requirements & Experience

• Minimum of 3 to 5 years of experience in the IT security industry, preferably working in a SOC/NOC environment.


• Preferably holds Cyber Security Certification e.g. GIAC, ISC2, SC-200

• Experience with Cloud platforms (AWS and/or Microsoft Azure)


• Excellent knowledge of Microsoft Office products, especially Excel and Word

Reports to

• Security Director – NTT DATA UK Security Practice


• Client Delivery Director – NTT DATA UK Managed Services

We’re a business with a global reach that empowers local teams, and we undertake hugely exciting work that is genuinely changing the world. Our advanced portfolio of consulting, applications, business process, cloud, and infrastructure services will allow you to achieve great things by working with brilliant colleagues, and clients, on exciting projects.

Our inclusive work environment prioritises mutual respect, accountability, and continuous learning for all our people. This approach fosters collaboration, well-being, growth, and agility, leading to a more diverse, innovative, and competitive organisation. We are also proud to share that we have a range of Inclusion Networks such as: the Women’s Business Network, Cultural and Ethnicity Network, LGBTQ+ & Allies Network, Neurodiversity Network and the Parent Network.

For more information on Diversity, Equity and Inclusion please click here: Creating Inclusion Together at NTT DATA UK | NTT DATA

We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.

You can find more information about NTT DATA UK & Ireland here: https://uk.nttdata.com/

We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.