SOC Solutions Engineer, NTT DATA
Digital transformation consulting and services
Open for applications
Digital transformation consulting and services
1001+ employees
Open for applications
1001+ employees
Company mission
To leverage information technology to create new paradigms and values, which help contribute to a more affluent and harmonious society.
Role
Who you are
- Must be able to obtain SC Clearance or already hold SC clearance
- SIEM Expertise: Hands-on experience with Splunk
- Technical Skills:
- Strong knowledge of log formats, parsing, and normalization
- Experience with KQL, SPL, AQL, or other SIEM query languages
- Familiarity with scripting (Python, PowerShell) for automation and enrichment
- Deep understanding of threat detection, incident response, and cyber kill chain
- Familiarity with MITRE ATT&CK, NIST, and CIS frameworks
- Strong verbal and written English communication
- Strong interpersonal and presentation skills
- Strong analytical skills
- Must have good understanding on network traffic flows and able to understand normal and suspicious activities
- Must have good understanding of Vulnerability Scanning and management as well as Ethical Hacking (Penetration Testing)
- Knowledge of ITIL disciplines such as Incident, Problem and Change Management
- Ability to work with minimal levels of supervision
- Willingness to work in a job that involves 24/7 on call
- Minimum of 2 to 4 years of experience in the IT security industry, preferably working in a SOC/NOC environment
- Preferably holds Cyber Security Certification e.g. ISC2 CISSP, GIAC, SC-200, Splunk Certified Admin/Power User, IBM QRadar Certified Specialist, Google Chronicle Security Engineer etc Ideally with Splunk
- Experience with Service Now Security suite
- Experience with Cloud platforms (AWS and/or Microsoft Azure)
- Excellent knowledge of Microsoft Office products, especially Excel and Word
What the job involves
- We are currently recruiting for a SOC Solutions Engineer to join our growing Security Operations Centre business
- The Junior SOC Engineer supports the enhancement of security operations capabilities by applying technical expertise in the Splunk SIEM platform
- The role involves contributing to playbook development, assisting in the creation of analytical rules, and participating in threat modelling activities
- Working under general direction, the engineer helps implement and optimise detection and response processes to improve operational effectiveness
- SIEM Engineering & Management
- Assist in deploying, configuring, and maintaining Splunk SIEM platform
- Support onboarding and normalisation of log sources across cloud and on-prem environments
- Contribute to the development and tuning of analytical rules for threat and anomaly detection
- Playbook Development & Automation
- Support the creation and implementation of incident response playbooks for common threat scenarios (e.g., phishing, lateral movement)
- Assist in integrating playbooks with SOAR platforms (e.g., Microsoft Logic Apps, XSOAR) to enable automation
- Help refine playbooks based on feedback and threat intelligence
- Threat Detection & Response
- Monitor and review security alerts and events to identify potential threats
- Participate in investigations and assist with incident response activities
- Collaborate with threat intelligence teams to improve detection logic
- Threat Modelling & Use Case Development
- Contribute to threat modelling exercises using frameworks such as MITRE ATT&CK or STRIDE
- Assist in translating threat models into detection use cases and SIEM rules
- Support prioritisation of detection efforts based on guidance
- Reporting & Collaboration
- Help generate reports and dashboards on security posture and incident trends
- Collaborate with IT, DevOps, and compliance teams to support secure system configurations
- Share knowledge and collaborate with junior analysts and engineers
- Maintain documentation of security procedures and incident response plans
- Assist in preparing monthly reporting packs as required
- Help document event and incident management processes, runbooks, and playbooks
- Other responsibilities:
- Support scoping and implementation of new solutions for emerging opportunities
- Assist the Pre-Sales team with technical input on new opportunities
- Participate in demonstrations of SOC tools to clients
- Contribute to continual service improvement by identifying and recommending changes
- Reports to
- Security Director – NTT DATA UK Security Practice
- Client Delivery Director – NTT DATA UK Managed Services
Our take
The changes brought on by digitisation have only accelerated in the past few decades, and large organisations have been struggling to keep up. Attracting future investment and ensuring growth is more than a matter of purchasing new tools, it involves a fundamental change in ways of working and company culture that few organisations have the expertise to achieve on their own. The UK and Ireland arm of NTT Data, a global digital transformation consultancy and services firm, exists to support businesses and government organisations through this seismic change.
With digital transformation at the top of most enterprises' agendas, NTT Data faces major competition in this sector from the likes of Deloitte, Accenture and IBM's consulting arm. However NTT Data UK & Ireland brings significant local expertise particularly in UK telecommunications, financial services and the British public sector which gives them an edge in this market.
NTT Data UK&I has ambitious plans to capture 2% of the total digital transformation market in the UK, a sector which was worth £20 billion in 2022 and is projected to increase rapidly year on year. To achieve this it has formed strategic partnerships with infrastructure providers such as Google Cloud, allowing it to offer multi-cloud solutions as part of its suite of services to its clients. If it can leverage the size and expertise of its parent organisation successfully while still retaining its local advantages, it is well placed to achieve this goal.
Steph
Company Specialist at Welcome to the Jungle
Insights
6% employee growth in 12 months
Company
Company benefits
- A people focused business
- Excellent opportunities to grow your career, including an online training platform with 3000+ courses, accessible from everywhere, to sharpen your skills
- A varied client base
Company HQ
London, UK
Leadership
Fernando Apezteguia
(Business Development and Value Creation NTT DATA UK)Was Market Unit Lead UK with NTT DATA before stepping up to the role of CEO of NTT DATA UK. Previously CEO of everis in Brazil and SAP specialist with El Corte Inglés.
Share this job
View 26 more jobs at NTT DATA