Digital Forensic and Incident Response Consultant

at  NTT Data

MAKE AN IMPACT WITH NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

KNOWLEDGE, SKILLS AND ATTRIBUTES:

• Advanced understanding of End Point Protection Software
• Advanced understanding of Enterprise Detection and Response software
• Advanced knowledge of technological advances within the information security arena
• Advanced understanding of inter-relationships in an overall system or process
• Advanced knowledge of information security management and policies
• Advanced understanding risk management principles and frameworks is crucial for prioritizing and addressing security incidents
• Advanced understanding of the organization’s business operations, goals, and objectives enables the analyst to align incident response efforts with the broader business strategy
• Ability to effectively communicate technical information to both technical and non-technical stakeholders, and end-users, as well as working with cross-functional teams during incident response
• Ability to think critically, analyze information, and solve medium to complex problems

ACADEMIC QUALIFICATIONS AND CERTIFICATIONS:

• Bachelor’s degree or equivalent in Information Technology, Computer Science or related
• SANS GIAC Security Essentials (GSEC) or equivalent
• SANS GIAC Certified Intrusion Analyst (GCIA) or equivalent
• SANS GIAC Certified Incident Handler (GCIH) or equivalent
• SANS GIAC Certified Forensics Analyst (GCFA) or equivalent

REQUIRED EXPERIENCE:

• Advanced experience in a Technology Information Security Industry
• Advanced experience or knowledge of SIEM and IPS technologies
• Advanced experience with Wireshark or tcpdump to identify normal and abnormal/malicious traffic patterns and behaviours
  NOTE: Candidate must be a Saudi national
  Workplace type:
  On-site Working

KEY ROLES AND RESPONSIBILITIES:

• Manages the prevention and resolution of security breaches and ensure incident and problem management processes are initiated
• Performs access management activities according to the policy
• Implements and discusses security service audit schedules, review access authorisation and perform the required access controls and testing to identify security weaknesses
• Interacts with a global team of Cyber Security Analysts and specialists
• Manages 2nd level triaging of security alerts, events, and notifications
• Manages notifications of internal and/or external teams according to agreed alert priority levels, and escalation trees
• Communicates status of response, resolution and final root cause analysis to the appropriate stakeholders
• Follows and updates established and/or ad-hoc processes and work instructions and create procedures where deficiencies are identified
• Logs, manages and coordinates service requests through to resolution including the identification, isolation, resolution and escalation of IT infrastructure faults
• Maintains an understanding of current and emerging threats, vulnerabilities, and trends