{"id":2672921,"url":"https://alion.io/job/ntt-data-incident-response-security-analysis-specialist-advisor-night-shift","title":"Incident Response Security Analysis Specialist Advisor-Night Shift","company":{"id":50348,"name":"NTT DATA","domain":"nttdata.com","url":"https://alion.io/company/ntt-data","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":98,"open_postings":87,"ghost_share":0,"stale_share":0.276,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tempe, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":97000,"max_usd":185000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-14T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-27T03:51:54Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"Req ID: 391312\nNTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.\nWe are currently seeking a Incident Response Security Analysis Specialist Advisor-Night Shift to join our team in Tempe, Arizona (US-AZ), United States (US).\nIn-office attendance is preferred three days per week. However, given the working hours, after the initial training period, full remote work is acceptable. Resources may be asked to come into the office if necessary for performance-related reasons.\nJob Profile:\nMajor Responsibilities\nConduct analysis of artifacts to determine methods of intrusion and best course of resolution while driving security improvement \nStrong Incident Response knowledge and experience\nTheoretical and practical knowledge with Mac OS, Linux, Windows operating systems and clouds\nExperience with security data collection, analysis and correlation \nWell-developed analytic, qualitative, and quantitative reasoning skills \nDemonstrated creative problem-solving abilities \nSecurity event monitoring, investigation, and overall incident response process \nInvestigate potential cybersecurity events across multiple environments using various tools and techniques \nDevelopment of information security policies, standards, and procedures \nStrong time management skills to balance multiple activities and lead junior analysts as needed \nUnderstanding of offensive security to include common attack methods \nUnderstanding of how to pivot across multiple datasets to correlate artifacts for a single security event \nA diverse skill base in both product security and information security including organizational structure and administration practices, system development and maintenance procedures, system software and hardware security controls, access controls, computer operations, physical and environmental controls, and backup and recovery procedures. \nDetailed knowledge and experience in security and regulatory frameworks (CRI, ISO 27001, NIST 800 series, FFIEC, SOC2, STAR, etc.) \nSupport inquiries from compliance teams such as IT risk management and internal and external auditors to ensure documentation is complete and processes are in compliance with information security policies \nCreate reports analyzing activities or trends both within and outside of the organization \nSupport the development of security operations detections, playbooks, and automations to ensure threat detection, monitoring, response, and forensics activities align with best practices, minimize gaps in detection and response, and provide comprehensive mitigation of threats \nReviews internal logs and alerts to identify potential cybersecurity events. Triage cases based on output from automated alerts, and determine when to escalate to other teams \nMonitors external service provider activity to detect potential cybersecurity events \nAnalyzes security data from all systems in real time to spot and thwart potential threats, attacks, and other violations \nAnalyzes compromised systems and remediates to a clean state \nPerforms breach indicator assessments to investigate network traffic for malicious activity \nAssists with internal or third-party employee investigations \nAssists in the production of various reports which identify and analyze relevant upcoming and ongoing threats to the enterprise \nResearch evolving threats, techniques, tools, and vulnerabilities in support of information security efforts \nStays current with information security program developments, industry frameworks, changes in the company, industry trends, and current security practices \nQualifications\nBachelor’s degree in Information Technology, Cyber Security, Computer Science, or related discipline \n5 + years of experience working in the Cybersecurity Operations or Information Security \nRelevant technical and industry certifications, such as CISSP, ISSMP, SANS, GIAC, GCIA, CISM, CEH, GCFA, GCFE, GCIH, or GSEC are preferred \nExperience in one or more security domains including Incident Response and Forensics, Security Governance and Oversight, Security Risk Management, Network Security, or Threat and Vulnerability Management preferred \nExperience with information security risk management, including information security audits, reviews, and risk assessments \nIn-office attendance is preferred three days per week. However, given the working hours, after the initial training period, full remote work is acceptable. Resources may be asked to come into the office if necessary for performance-related reasons.\nNight Shift- 6:00 PM - 4:00 AM PT (9:00 PM - 7:00 AM ET)\nAbout NTT DATA\nNTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D.\nWhenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.\nNTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.","description_format":"text","description_chars":7209,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","Health Care","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-16T04:25:42Z"},{"event":"close","at":"2026-10-17T12:55:39Z"},{"event":"reopen","at":"2026-10-17T16:06:38Z"},{"event":"close","at":"2026-10-17T22:44:14Z"},{"event":"reopen","at":"2026-10-18T05:18:56Z"},{"event":"close","at":"2026-10-19T04:44:38Z"},{"event":"reopen","at":"2026-10-19T08:43:28Z"},{"event":"close","at":"2026-10-19T16:51:46Z"},{"event":"reopen","at":"2026-10-19T20:45:39Z"},{"event":"close","at":"2026-10-23T17:34:06Z"},{"event":"reopen","at":"2026-10-23T21:46:59Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 399 · green card filings: 60","filings_12m":399,"filings_prev_12m":499,"green_card_filings_12m":60,"median_offered_wage_usd":123600,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.848,"p_room":0.9,"age_days":12,"expected_fill_days":18,"reasons":["conf:1","velocity","win:mid","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/ntt-data-incident-response-security-analysis-specialist-advisor-night-shift","json_url":"https://alion.io/job/ntt-data-incident-response-security-analysis-specialist-advisor-night-shift.json","meta":{"generated_at":"2026-10-27T04:47:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4467,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50348},"rest":"https://alion.io/mcp/rest/get_company?id=50348"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fntt-data-incident-response-security-analysis-specialist-advisor-night-shift"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fntt-data-incident-response-security-analysis-specialist-advisor-night-shift"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fntt-data-incident-response-security-analysis-specialist-advisor-night-shift"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ntt-data-incident-response-security-analysis-specialist-advisor-night-shift\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fntt-data-incident-response-security-analysis-specialist-advisor-night-shift"}]}