Overview
MS Engineer (L4) : Cyber Security – NTT DATA, Inc.
Make an impact with NTT DATA. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.
Your day at NTT DATA : The NTT Managed Services Team is a dynamic and high performing team supporting NTT’s client in a Managed / Outsourced Environment. The role performs a variety of Endpoint security, vulnerability management, and Security Incident response based engineering activities to enable the delivery of complete Integrated Services Management across ITIL disciplines (Incident-Request-Problem-Configuration-Change-Release Management).
Key Responsibilities
- Accept, manage and update service requests to ensure contracted Service Level Agreements are met.
- Provide remote and onsite technical support within Managed Services’ ITIL aligned service delivery processes including Incident Management, Problem Management, Configuration Management, Change Management and Release Management.
- Manage, own and co-ordinate the technical resolution of incidents remotely or onsite using Field Engineering resources.
- Plan, coordinate and implement complex Endpoint security changes within customer-specified windows, adhering to ITIL change management framework; liaise with customer, third party suppliers, vendors and partners to minimize disruption and ensure seamless delivery.
- Incident analysis and response : assist SOC analysts by providing guidance and support in analyzing security events, investigating incidents, and responding to cyber threats.
- Threat intelligence analysis : collaborate with teams or external providers to gather, analyze and interpret threat intelligence and implement proactive measures; research and recommend mitigations for current and future threats.
- Ensure SOC operations align with standards and regulations (e.g., ISO 27001, NIST, PCI DSS) and industry requirements.
- Incident reporting and communication : prepare reports and communicate security incidents, vulnerabilities, and findings to stakeholders, management, and auditors.
- Coordinate with Professional Services Engineers and Solutions Architects on client projects and deployments as needed.
- Maintain knowledge of the client’s environments and relevant documentation, including diagrams, configurations, processes, and procedures.
- Manage stakeholder expectations and contribute to reducing the impact of cybersecurity events.
- Provide proactive, clear communication on incident / problem status between client, NTT, and third-party vendors; escalate issues as needed.
- Understand and participate in shift handovers, operational guidance, support and escalation.
- Understand the scope and delivery of EndPoint Security Services within Managed Services.
- Triage security alerts across platforms including Azure Defender, Security Center, and Sentinel; review overnight priority alerts and coordinate actions as required.
- Read and understand actionable information from M365 service alerts / health incidents related to Defender.
- Prioritize and address high-severity threats and vulnerabilities.
Job Requirements (Mandatory)
Strong experience managing Next-Generation Endpoint security products, particularly Microsoft Defender for Endpoint (XDR).Experience managing Microsoft Defender suite (XDR, DFE for Cloud).At least 10+ years of relevant experience in Endpoint Security.Experience with virus / worm / trojan / ransomware outbreaks and malware analysis.Solid understanding of Microsoft O365 and Active Directory.Solid understanding of Windows OS; Linux OS is a plus.Experience maintaining Trellix environment in optimum performance and compliance.Experience administering complex security issues for enterprise endpoints (3,000+ nodes) in a distributed environment.Knowledge of Vulnerability Management and Risk Analysis; identify process and technical improvements.Desirable
Knowledge of other EDR solutions (CrowdStrike, Trellix, Symantec).Experience with Email Security products.Experience with Microsoft security technologies (Sentinel SIEM, SOAR, IDS, threat intelligence platforms, and IR tools).ITIL Services Framework knowledge or training.Personal Attributes and Skills
Experience managing large Endpoint Security customers with multiple sites.Strong teamwork, logical thinking, and ability to work independently with minimal guidance.Adaptability in a challenging and changing environment; governance and risk compliance exposure (GRC).Willingness to persevere, resourcefulness, sound judgement, and a strong customer service focus.Excellent communication, writing, and interpersonal skills.Aligned with NTT core values : Proactively, Teamwork, Professional Excellence, Partnership, Personal Commitment.High initiative, accountability, attention to detail, and process adherence.Workplace
Hybrid WorkingAdditional Info
Candidates eligible to work in NZ are preferred.Work sponsorship is possible (with terms and conditions).Disclaimer : Only shortlisted candidates will be contacted.
About NTT DATA
NTT DATA is a $30+ billion global innovator of business and technology services, serving 75% of the Fortune Global 100. We invest over $3.6 billion annually in R&D and operate in more than 50 countries. We work across consulting, data / AI, industry solutions, and the development, implementation, and management of applications, infrastructure, and connectivity. NTT DATA is part of NTT Group and headquartered in Tokyo. Equal Opportunity Employer.
#J-18808-Ljbffr