Digital Forensic and Incident Response Consultant

About the Job
Continue to make an impact with a company that is pushing the boundaries of what is possible. At NTT DATA, we are renowned for our technical excellence, leading innovations, and making a difference for our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can continue to grow, belong, and thrive.

Your career here is about believing in yourself and seizing new opportunities and challenges. It’s about expanding your skills and expertise in your current role and preparing yourself for future advancements. That’s why we encourage you to take every opportunity to further your career within our great global team.

Key Roles and Responsibilities:

• Manage the prevention and resolution of security breaches and ensure incident and problem management processes are initiated.
• Perform access management activities according to the policy.
• Implement and discuss security service audit schedules, review access authorization, and perform the required access controls and testing to identify security weaknesses.
• Interact with a global team of Cyber Security Analysts and specialists.
• Manage 2nd level triaging of security alerts, events, and notifications.
• Manage notifications of internal and/or external teams according to agreed alert priority levels and escalation trees.
• Communicate status of response, resolution, and final root cause analysis to the appropriate stakeholders.
• Follow and update established and/or ad-hoc processes and work instructions and create procedures where deficiencies are identified.
• Log, manage, and coordinate service requests through to resolution including the identification, isolation, resolution, and escalation of IT infrastructure faults.
• Maintain an understanding of current and emerging threats, vulnerabilities, and trends.

Knowledge, Skills, and Attributes:

• Advanced understanding of End Point Protection Software.
• Advanced understanding of Enterprise Detection and Response software.
• Advanced knowledge of technological advances within the information security arena.
• Advanced understanding of inter-relationships in an overall system or process.
• Advanced knowledge of information security management and policies.
• Advanced understanding of risk management principles and frameworks is crucial for prioritizing and addressing security incidents.
• Ability to effectively communicate technical information to both technical and non-technical stakeholders and end-users, as well as working with cross-functional teams during incident response.
• Ability to think critically, analyze information, and solve medium to complex problems.

Academic Qualifications and Certifications:

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or related field.
• SANS GIAC Security Essentials (GSEC) or equivalent.
• SANS GIAC Certified Intrusion Analyst (GCIA) or equivalent.
• SANS GIAC Certified Incident Handler (GCIH) or equivalent.
• SANS GIAC Certified Forensics Analyst (GCFA) or equivalent.

Required Experience:

• Advanced experience in a Technology Information Security Industry.
• Advanced experience or knowledge of SIEM and IPS technologies.
• Advanced experience with Wireshark or tcpdump to identify normal and abnormal/malicious traffic patterns and behaviors.

Note: Candidate must be a Saudi national.

Workplace Type: On-site

Equal Opportunity Employer
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment.