Job Description
Senior Engineer - Cyber Security
Join our growing global NTT team and you’ll be part of the world’s largest ICT company (by revenue). We’ve combined the capabilities of 28 remarkable companies to become one, leading technology services provider. Together, we help our people, clients, and communities do great things with technology to create a more secure and connected future. We employ 40,000 people across 57 countries. By bringing together the world’s best technology companies and emerging innovators, we work together to deliver sustainable outcomes to businesses and the world. Innovation is part of our DNA. We believe it’s key to what makes us different. So, we strive to move forward, challenge the status quo, and drive excellence through the technologies we integrate and the services we deliver around the world. The result is connected cities, connected factories, connected healthcare, connected agriculture, connected conservation, connected mobility, and connected sport. Together we enable the connected future.
Overview
The NTT Managed Services Team is a dynamic and high performing team supporting NTT’s client in a Managed / Outsourced Environment.
Your role is to perform a variety of Endpoint security, vulnerability management, Security Incident response based engineering activities to enable the delivery of complete Integrated Services Management across all ITIL disciplines, being Incident-Request-Problem-Configuration-Change-Release Management.
This includes applying your analytical, reasoning & specialised technical expertise to investigate, isolate and rectify security incidents, identify root causes and undertake problem management activities.
You will also be required to use these same skills to implement complex, large scale network changes within a structured change management framework, to perform release management and configuration management tasks in line with an ITIL compliant operations delivery structure.
To do this you will need to acquire a solid understanding of the NTT’s Integrated Services Management Operation “end-to-end”, to gain a thorough understanding of the customer’s specific business operations and how these apply to each of the specific ITIL disciplines.
It is this specific customer knowledge that will assist you to fulfil your duties and ensure you are an effective and autonomous member of the team.
You will also be required to perform system changes outside of normal business hours within time frames that are specified to reduce disruption to the customers business.
Primary Duties:
Accept, manage and update service requests to ensure contracted Service Level Agreements are met.
Provide remote and onsite technical support within Managed Services’ ITIL aligned service delivery processes including Incident Management, Problem Management .
Configuration Management, Change Management and Release Management.
Manage, own and co-ordinate the technical resolution of incidents either remotely or onsite utilising Field Engineering resources.
Plan, coordinate and implement complex Endpoint security changes within customer specified change windows, adhering to a predefined ITIL change management framework. This will include liaising with the customer, third party suppliers, vendors and partners to ensure minimal disruption to the customer’s day-to-day business operations, and the provision of seamless, coordinated delivery of services.
Incident analysis and response: Assisting SOC analysts by providing guidance and support in analysing security events, investigating incidents, and responding to cyber threats and attack
Threat intelligence analysis: Collaborating with other teams or external threat intelligence providers to gather, analyse, and interpret threat intelligence to identify emerging threats and implement proactive measures. Research and recommend mitigation strategies for current and future threats relevant to the Clients environment.
Compliance and regulatory requirements: Ensuring that SOC operations align with applicable standards, regulations, and best practices, such as ISO 27001, NIST, PCI DSS, or industry-specific compliance requirements.
Incident reporting and communication: Preparing reports and communicating security incidents, vulnerabilities, and findings to stakeholders, management, and internal or external auditors as necessary.
Provide proactive, constant and clear communication on the status of incident/problem resolution between the client, NTT, and any other third party supplier and vendors.
Escalate issues affecting the delivery of service to management.
Understand the scope, delivery mechanisms and processes of all relevant EndPoint Security Services delivered by Managed Services.
Triage and manage security alerts across various platforms including the Azure Defender portal, Security centre, and Sentinel.
Review overnight all priority Sentinel alerts, raise ticket if any required Ops teams actions. Triage MDR tickets and reassign to relevant internal operations teams.
Read & understand actionable information from the M365 service alerts/health incidents/advisory related to Defender (Major updates from Message centre).
Prioritise and address high-severity threats, ensuring rapid response to vulnerabilities.
Experience:
Technical (Mandatory)
Strong experience managing Next-Generation Endpoint security products particularly Microsoft Defender for Endpoint (XDR).
Experience managing Microsoft Defender suit of products XDR, DFE for Cloud.
At least 8 plus years of relevant experience in Endpoint Security.
Good experience dealing with virus/worm/trojan/ransomware outbreaks and malware analysis.
Solid understanding of Microsoft O365 and Active Directory groups.
Solid understanding of Linux OS, as well as knowledge of Windows OS
Maintain Trellix environment in optimum performance and compliance standards.
Experience with administration including the ability to configure and resolve complex security issues in support of enterprise endpoints (3,000+ nodes) in a geographically dispersed environment.
Knowledge of Vulnerability Management and Risk Analysis.
Identify process and technical improvements for the environment. Technical
(Desirable)
Knowledge and experience with other EDR solutions from Crowdstrike, Trellix, Symantec.
Experience in managing Email Security products.
Experience in Microsoft security technologies such as Sentinel SIEM, SOAR systems, intrusion detection systems, threat intelligence platforms, and incident response tools.
Prior experience and/or training about the ITIL Services Framework.
Attributes
Experience in managing large Endpoint Security customers with multiple sites.
Strong team player, logical thinker, work independently with minimum guidance.
Ability to work in a challenging and constantly changing environment.
Exposure to Cyber Security Governance and Risk Compliance (GRC) and experience in providing innovative solutions to complex cybersecurity problems.
Display a willingness to persevere with difficult tasks.
Demonstrate resourcefulness and sound judgement.
Strong customer service focus with an understanding of client expectations.
Strong communication, writing and interpersonal skills.
Demonstration of NTT’s core values of Proactively, Teamwork, Professional Excellence, Partnership, and Personal Commitment.
High level of initiative, accountability, attention to detail and ability to follow the process.
Join our growing global team and accelerate your career with us. Apply today.
For more information about this or other opportunities, please contact Shipra Aggarwal. Please quote our job reference number 62+717.
About us
NTT Ltd. is a global ICT provider, employing more than 40,000 people in a diverse and dynamic workplace, and delivering services in over 200 countries and regions. We partner with organizations around the world to shape and achieve outcomes through intelligent technology solutions. For us, intelligent means data driven, connected, digital, and secure.
NTT is proud to be an equal opportunity employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, color, religion, national origin, disability, pregnancy, marital status, orientation, gender reassignment, veteran status, or other protected category.
Join our growing global NTT team and you’ll be part of the world’s largest ICT company (by revenue). We’ve combined the capabilities of 28 remarkable companies to become one, leading technology services provider. Together, we help our people, clients, and communities do great things with technology to create a more secure and connected future. We employ 40,000 people across 57 countries. By bringing together the world’s best technology companies and emerging innovators, we work together to deliver sustainable outcomes to businesses and the world. Innovation is part of our DNA. We believe it’s key to what makes us different. So, we strive to move forward, challenge the status quo, and drive excellence through the technologies we integrate and the services we deliver around the world. The result is connected cities, connected factories, connected healthcare, connected agriculture, connected conservation, connected mobility, and connected sport. Together we enable the connected future.
Overview
The NTT Managed Services Team is a dynamic and high performing team supporting NTT’s client in a Managed / Outsourced Environment.
Your role is to perform a variety of Endpoint security, vulnerability management, Security Incident response based engineering activities to enable the delivery of complete Integrated Services Management across all ITIL disciplines, being Incident-Request-Problem-Configuration-Change-Release Management.
This includes applying your analytical, reasoning & specialised technical expertise to investigate, isolate and rectify security incidents, identify root causes and undertake problem management activities.
You will also be required to use these same skills to implement complex, large scale network changes within a structured change management framework, to perform release management and configuration management tasks in line with an ITIL compliant operations delivery structure.
To do this you will need to acquire a solid understanding of the NTT’s Integrated Services Management Operation “end-to-end”, to gain a thorough understanding of the customer’s specific business operations and how these apply to each of the specific ITIL disciplines.
It is this specific customer knowledge that will assist you to fulfil your duties and ensure you are an effective and autonomous member of the team.
You will also be required to perform system changes outside of normal business hours within time frames that are specified to reduce disruption to the customers business.
Primary Duties:
Accept, manage and update service requests to ensure contracted Service Level Agreements are met.
Provide remote and onsite technical support within Managed Services’ ITIL aligned service delivery processes including Incident Management, Problem Management .
Configuration Management, Change Management and Release Management.
Manage, own and co-ordinate the technical resolution of incidents either remotely or onsite utilising Field Engineering resources.
Plan, coordinate and implement complex Endpoint security changes within customer specified change windows, adhering to a predefined ITIL change management framework. This will include liaising with the customer, third party suppliers, vendors and partners to ensure minimal disruption to the customer’s day-to-day business operations, and the provision of seamless, coordinated delivery of services.
Incident analysis and response: Assisting SOC analysts by providing guidance and support in analysing security events, investigating incidents, and responding to cyber threats and attack
Threat intelligence analysis: Collaborating with other teams or external threat intelligence providers to gather, analyse, and interpret threat intelligence to identify emerging threats and implement proactive measures. Research and recommend mitigation strategies for current and future threats relevant to the Clients environment.
Compliance and regulatory requirements: Ensuring that SOC operations align with applicable standards, regulations, and best practices, such as ISO 27001, NIST, PCI DSS, or industry-specific compliance requirements.
Incident reporting and communication: Preparing reports and communicating security incidents, vulnerabilities, and findings to stakeholders, management, and internal or external auditors as necessary.
Provide proactive, constant and clear communication on the status of incident/problem resolution between the client, NTT, and any other third party supplier and vendors.
Escalate issues affecting the delivery of service to management.
Understand the scope, delivery mechanisms and processes of all relevant EndPoint Security Services delivered by Managed Services.
Triage and manage security alerts across various platforms including the Azure Defender portal, Security centre, and Sentinel.
Review overnight all priority Sentinel alerts, raise ticket if any required Ops teams actions. Triage MDR tickets and reassign to relevant internal operations teams.
Read & understand actionable information from the M365 service alerts/health incidents/advisory related to Defender (Major updates from Message centre).
Prioritise and address high-severity threats, ensuring rapid response to vulnerabilities.
Experience:
Technical (Mandatory)
Strong experience managing Next-Generation Endpoint security products particularly Microsoft Defender for Endpoint (XDR).
Experience managing Microsoft Defender suit of products XDR, DFE for Cloud.
At least 8 plus years of relevant experience in Endpoint Security.
Good experience dealing with virus/worm/trojan/ransomware outbreaks and malware analysis.
Solid understanding of Microsoft O365 and Active Directory groups.
Solid understanding of Linux OS, as well as knowledge of Windows OS
Maintain Trellix environment in optimum performance and compliance standards.
Experience with administration including the ability to configure and resolve complex security issues in support of enterprise endpoints (3,000+ nodes) in a geographically dispersed environment.
Knowledge of Vulnerability Management and Risk Analysis.
Identify process and technical improvements for the environment. Technical
(Desirable)
Knowledge and experience with other EDR solutions from Crowdstrike, Trellix, Symantec.
Experience in managing Email Security products.
Experience in Microsoft security technologies such as Sentinel SIEM, SOAR systems, intrusion detection systems, threat intelligence platforms, and incident response tools.
Prior experience and/or training about the ITIL Services Framework.
Attributes
Experience in managing large Endpoint Security customers with multiple sites.
Strong team player, logical thinker, work independently with minimum guidance.
Ability to work in a challenging and constantly changing environment.
Exposure to Cyber Security Governance and Risk Compliance (GRC) and experience in providing innovative solutions to complex cybersecurity problems.
Display a willingness to persevere with difficult tasks.
Demonstrate resourcefulness and sound judgement.
Strong customer service focus with an understanding of client expectations.
Strong communication, writing and interpersonal skills.
Demonstration of NTT’s core values of Proactively, Teamwork, Professional Excellence, Partnership, and Personal Commitment.
High level of initiative, accountability, attention to detail and ability to follow the process.
Join our growing global team and accelerate your career with us. Apply today.
For more information about this or other opportunities, please contact Shipra Aggarwal. Please quote our job reference number 62+717.
About us
NTT Ltd. is a global ICT provider, employing more than 40,000 people in a diverse and dynamic workplace, and delivering services in over 200 countries and regions. We partner with organizations around the world to shape and achieve outcomes through intelligent technology solutions. For us, intelligent means data driven, connected, digital, and secure.
NTT is proud to be an equal opportunity employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, color, religion, national origin, disability, pregnancy, marital status, orientation, gender reassignment, veteran status, or other protected category.
💡 Quick Summary
Seeking a career-building opportunity? The Senior Engineer - Endpoint Security position is now open for candidates interested in the Work from home Jobs sector. This role in Auckland offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in Work from home Jobs is a plus.
