The team you'll be working with:
SOC Analyst (L2)
We are currently recruiting for a Senior Associate level Managed Detection and Response SOC Analyst Level 2 to join our growing Security Operations Centre business.
This role will be based on-site in Birmingham. Candidates must be able to work in a 24/7 operation, likely in shift patterns of 4 days on, 4 days off.
About Us
NTT DATA is one of the world’s largest global security services providers with over 7,500 security SMEs and an integration partner to many of the world’s most recognized security technology providers. We strive to hire exceptional, innovative, and passionate individuals who want to grow with us. In a constantly changing world, we work together with our people, clients, and communities to enable them to fulfill their potential to do great things. We believe that by bringing everyone together, we can solve problems using innovative technology to create a sustainable and secure world.
This is a great opportunity for you to play a pivotal role in shaping our client’s transformation journeys.
What you'll be doing
The primary function of the SOC Analyst (L2) is to analyze incidents escalated by the SOC Analyst (L1) and undertake detailed investigations of security events. The Security Analyst (L2) will determine whether an event qualifies as an incident and coordinate with the customer’s IT and security teams for resolution.
Main Duties
* Security Monitoring & Investigation: Monitoring SIEM tools, overseeing security monitoring systems, conducting real-time analysis, supporting investigations, documenting findings, and ensuring runbooks are followed.
* Incident Response: Leading incident response activities, developing response plans, managing escalations, and following major incident processes.
* Threat Intelligence: Staying updated on cybersecurity threats, integrating threat intelligence, and contributing to threat feeds.
* Security Tool Management: Managing and optimizing SIEM tools, developing SOC use cases, evaluating new security technologies.
* Collaboration: Working with cross-functional teams, providing guidance, and ensuring monitoring of new services.
* Documentation: Maintaining security procedures, incident reports, and creating post-incident reports and reports for management.
* Other Responsibilities: Involvement in new solutions, supporting pre-sales, demonstrating SOC tools, and continual service improvement.
What experience you'll bring
* Must be able to obtain or already hold SC clearance.
* Good understanding of Incident Response approaches.
* Hands-on knowledge of Microsoft Sentinel or similar SIEM tools.
* Strong communication skills (verbal and written).
* Good understanding of network traffic, vulnerability management, ethical hacking, and forensic techniques.
* Knowledge of ITIL disciplines.
* Ability to work independently and in a 24/7 shift environment.
Education & Experience
* Minimum 3 to 5 years in IT security, preferably in a SOC/NOC environment.
* Cybersecurity certifications such as GIAC, ISC2, SC-200 are preferred.
* Experience with cloud platforms (AWS/Azure).
* Proficiency in Microsoft Office, especially Excel and Word.
Reporting Lines
Reports to the Security Director – NTT DATA UK Security Practice and Client Delivery Director – NTT DATA UK Managed Services.
#J-18808-Ljbffr