Cloud Application Security, NTT DATA
DevSecOps, SME
Digital transformation consulting and services
Open for applications
Digital transformation consulting and services
1001+ employees
Open for applications
1001+ employees
Company mission
To leverage information technology to create new paradigms and values, which help contribute to a more affluent and harmonious society.
Role
Who you are
- You're somebody that's obsessive about solving business and client challenges, and take a strong focus on security risk to help tackle client challenges
- You have an egineering background and have experience operating at a client advisory level
- You use your ability to blend your technical knowledge and consulting ability to craft market-leading solutions to multi-million pound problems
- Designing and building within a public cloud environment (E.g. Azure, GCP, AWS)
- Skilled in programming, with expertise in your language of choice (E.g. Java, Python, TypeScript, Go, Rust)
- Strong understanding of API protocols such as REST, SOAP, gRPC, GraphQL, WebSockets and how to secure them
- DevSecOps frameworks and methodologies
- OWASP
- Application and IaC security testing (SAST)
- Integration/operation challenges with security toolsets, for example: Synopsys, Veracode, Checkmarx, Cequence, Akamai, Salt, GitLab, MicroFocus Fortify SCA, WebInspect, App Defender, Sonatype, SonarQube, Qualys and TripWire (IP360), Burp Suite, Synk, Twistlock
- Knowledge of RDBMS (E.g. MySQL, PostgreSQL, MariaDB, Microsoft SQL Server, and Oracle Database)
- Knowledge of Secure by Design and Zero Trust principles
What the job involves
- We're looking for a Cloud Application Security SME to join our delivery team, and help shape and direct our clients' security transformation journeys
- We work closely with the public sector, and as such you will be required to undergo SC clearance for this position
- Working within agreed timelines throughout the evaluate, design and build phases to identify security requirements; define application security solutions; configure and test using DevSecOps tools and platforms
- Leveraging your core competence and knowledge of industry Application Security standards, frameworks and good practices to support security reviews, enablement, validation or definitions of application security outcomes
- Identifying:
- Client needs for application security technology/tools and process adoption
- Technical security requirements, both functional and non-functional
- Gaps, issues, assumptions and failings in the client application security landscape
- Client needs in terms of outcomes, stakeholder engagement and risk mitigation
- Defining:
- Project testing strategy, test plans, test scenarios and approach
- Security environment objectives and targets, including change impact and risk
- Cross-team implementation plans
- Appropriate metrics and processes to achieve client objectives and targets
- Enacting:
- The setup of application security specific components and processes for development, test, and production environments
- Application security and DevSecOps technology implementations and configurations
- Robust practices for the protection and security of client systems
- Oversee, evaluate, and support:
- Discovery and audits
- Documentation, validation, assessment, and authorisation
- GRC Consultants and Service/Solution architects in the securing of products and services
Salary benchmarks
Our take
The changes brought on by digitisation have only accelerated in the past few decades, and large organisations have been struggling to keep up. Attracting future investment and ensuring growth is more than a matter of purchasing new tools, it involves a fundamental change in ways of working and company culture that few organisations have the expertise to achieve on their own. The UK and Ireland arm of NTT Data, a global digital transformation consultancy and services firm, exists to support businesses and government organisations through this seismic change.
With digital transformation at the top of most enterprises' agendas, NTT Data faces major competition in this sector from the likes of Deloitte, Accenture and IBM's consulting arm. However NTT Data UK & Ireland brings significant local expertise particularly in UK telecommunications, financial services and the British public sector which gives them an edge in this market.
NTT Data UK&I has ambitious plans to capture 2% of the total digital transformation market in the UK, a sector which was worth £20 billion in 2022 and is projected to increase rapidly year on year. To achieve this it has formed strategic partnerships with infrastructure providers such as Google Cloud, allowing it to offer multi-cloud solutions as part of its suite of services to its clients. If it can leverage the size and expertise of its parent organisation successfully while still retaining its local advantages, it is well placed to achieve this goal.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- A people focused business
- Excellent opportunities to grow your career, including an online training platform with 3000+ courses, accessible from everywhere, to sharpen your skills
- A varied client base
Company values
- Clients first
- Foresight
- Teamwork
Company HQ
City of London, London, UK
Articles
Leadership
Fernando Apezteguia
(CEO NTT DATA UK, not founder)Was Market Unit Lead UK with NTT DATA before stepping up to the role of CEO of NTT DATA UK. Previously CEO of everis in Brazil and SAP specialist with El Corte Inglés.
Share this job
View 12 more jobs at NTT DATA