{"id":2670212,"url":"https://alion.io/job/ntt-data-information-security-manager-sentinel","title":"Information Security Manager (Sentinel)","company":{"id":50348,"name":"NTT DATA","domain":"nttdata.com","url":"https://alion.io/company/ntt-data","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"B","score":75,"open_postings":26,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sibiu, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":40000,"max_usd":93000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"Ansible","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Gmail","optional":true},{"name":"WhatsApp","optional":true}],"status":"live","first_seen_at":"2026-10-15T00:00:00Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-16T09:39:49Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Who we are\nNTT DATA is one of the world's largest global security service providers, partnering with some of the most recognized security technology brands. We're looking for passionate, curious, and motivated individuals to join our team.\nOur mission is to protect and empower organizations through cutting-edge Managed Detection and Response (MDR) solutions, deep technical expertise, and a client-first mindset.\nWe are seeking an experienced Cybersecurity professional with strong expertise in Microsoft Sentinel, security operations, threat detection, and cloud security, who can combine hands-on engineering capabilities with a trusted advisor approach towards our customers.\nWhat you'll be doing\nBuild strong, meaningful “trusted advisor” relationships with clients on behalf of NTT DATA and act as the main Cybersecurity Advisor for one or more customers.\nDesign, implement, maintain, and optimize Microsoft Sentinel environments, ensuring proper configuration, data ingestion quality, and alignment with customer security objectives.\nDevelop, refine, and optimize detection rules, analytics, workbooks, dashboards, and advanced KQL queries for threat detection, hunting, investigation, and reporting.\nSupport customers in optimizing the detection, response, mitigation, and reporting of cybersecurity threats within their environments.\nLead and support threat hunting activities using Microsoft Sentinel, Microsoft Defender XDR, and relevant Threat Intelligence sources.\nOversee the onboarding and integration of new log sources, ensuring appropriate mapping, normalization, governance, and data quality.\nContinuously tune alerts, analytics rules, data connectors, and detection logic to improve accuracy and reduce the signal-to-noise ratio.\nProvide expertise across Network/Perimeter/Cloud Security, SecOps, Threat Intelligence, EDR, and detection capabilities.\nAnalyze network traffic and security telemetry and design relevant detection use cases based on identified risks and attack patterns.\nPropose recommendations for improving customers' cybersecurity posture and reducing identified risks.\nProduce comprehensive technical documentation, including use cases, detection logic, response procedures, runbooks, and architectural diagrams.\nCollaborate with SOC analysts, security engineers, cloud teams, application owners, and customer stakeholders to ensure coordinated incident response and remediation activities.\nSupport SOAR playbook development using Logic Apps to automate triage, response actions, and security workflows.\nAct as a Subject Matter Expert (SME) in Cybersecurity and MDR solutions, providing technical guidance and mentorship to junior team members and cross-functional teams.\nStay up to date with emerging cybersecurity threats, technologies, attack techniques, and industry trends and translate them into improvements to detection and response capabilities.\nReview cybersecurity processes, procedures, runbooks, response workflows, and training programs aligned with organizational risk and industry standards.\nWhat you'll bring along\nBachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.\nMinimum 5-7 years of professional experience in IT Cybersecurity, Security Operations, Detection Engineering, MDR, or a similar role.\nExtensive hands-on experience administering and engineering Microsoft Sentinel solutions, including analytics rules, automation, log management, and data connectors.\nStrong proficiency in KQL, with the ability to develop complex queries for threat detection, investigation, hunting, and reporting.\nStrong knowledge of SIEM, SOAR, EDR, firewalls, IDS/IPS, and other security technologies.\nPractical experience with Microsoft Defender XDR solutions, including Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps.\nVery good knowledge of Azure and cloud security concepts, including identity management, network security controls, and cloud-native security architecture.\nTechnical understanding of common Microsoft environments and technologies such as Entra ID, Microsoft 365, Active Directory, and Exchange.\nDeep understanding of security monitoring, threat detection methodologies, incident response, threat hunting, and SOC operations.\nStrong understanding of log source onboarding, normalization, and integration within Microsoft Sentinel.\nUnderstanding of cybersecurity domains such as network security, endpoint security, anomaly detection, Threat Intelligence, and cloud security.\nGood knowledge of the MITRE ATT&CK Framework and its application to detection engineering and threat hunting.\nAbility to perform network traffic analysis and translate findings into relevant detection and monitoring use cases.\nExperience integrating Microsoft Sentinel with third-party log sources, security tools, and other SIEM platforms such as Palo Alto XSIAM or Splunk is an advantage.\nKnowledge of scripting and automation technologies such as Python, Bash, PowerShell, Logic Apps, Ansible, or Terraform.\nKnowledge of security models, industry best practices, and generally accepted information security principles.\nLinux experience is considered an advantage.\nStrong communication, stakeholder management, and documentation skills, with the ability to translate complex technical concepts into clear and actionable recommendations.\nAbility to work effectively in a customer-facing environment and communicate with both technical and non-technical stakeholders.\nRelevant certifications such as SC-200, SC-100, AZ-500, CISSP, CISM, SANS GCDA, SANS GCED, or other GIAC certifications are highly desirable.\nAbility and willingness to travel domestically and internationally when required.\nProficiency in English is mandatory; German language skills are an advantage.\n\nDocument\n\nWhat’s in it for you\nNew beginnings can be a challenge. We promise a smooth integration and a supportive mentor\nPick your working style: choose from Remote, Hybrid or Office work opportunities\nEarly bird or night owl? Our projects have different working hours to suit your needs\nNobody is born an expert. Sharpen your tech skills with our sponsored certifications, trainings and top e-learning platforms\nWe want you to stay healthy! Enjoy our Private Health Insurance - it’s custom-made for you\nA clear mind is a healthy mind. Attend individual coaching sessions or go one step further by joining our accredited Coaching School\nMake the most of our epic parties or themed events - they’re lovingly designed for our people and their families\nNTT DATA recruiters will never ask job seekers and candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties that may try to impersonate NTT DATA recruiters, either in writing or by phone, in an attempt to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will be associated with an @nttdata.com email address. NTT DATA will not use any non-NTT DATA or personal email domains (Gmail, Yahoo, etc.) or personal communication channels (WhatsApp, Facebook etc) at any time during the recruitment process. If you suspect any fraudulent activity, please contact us.\nNTT DATA Romania is an equal opportunity employer and considers all applicants regardless to race, color, religion, citizenship, national origin, ancestry, age, sex, sexual orientation, gender identity, genetic information, physical or mental disability, veteran or marital status, or any other characteristic protected by law. We are committed to creating a diverse and inclusive environment for all employees.\nNot the job for you? Perhaps you have a friend who would be a perfect fit. Send them this link!\nWhat’s in it for you\nNew beginnings can be a challenge. We promise a smooth integration and a supportive mentor\nPick your working style: choose from Remote, Hybrid or Office work opportunities\nEarly bird or night owl? Our projects have different working hours to suit your needs\nNobody is born an expert. Sharpen your tech skills with our sponsored certifications, trainings and top e-learning platforms\nWe want you to stay healthy! Enjoy our Private Health Insurance - it’s custom-made for you\nA clear mind is a healthy mind. Attend individual coaching sessions or go one step further by joining our accredited Coaching School\nMake the most of our epic parties or themed events - they’re lovingly designed for our people and their families\nMake this the place you grow\nYour unique talent is what matters. NTT DATA Romania is an equal opportunity employer and considers all applicants regardless to race, color, religion, citizenship, national origin, ethnicity, age, gender, sexual orientation, gender identity, genetic information, physical or mental disability, veteran or marital status, or any other characteristic.\n\nDocument\n\nThird parties fraudulently posing as NTT DATA recruiters\nNTT DATA recruiters will never ask job seekers and candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties that may try to impersonate NTT DATA recruiters, either in writing or by phone, in an attempt to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will be associated with an @nttdata.com email address. NTT DATA will not use any non-NTT DATA or personal email domains (Gmail, Yahoo, etc.) or personal communication channels (WhatsApp, Facebook etc) at any time during the recruitment process. If you suspect any fraudulent activity, please contact us.","description_format":"text","description_chars":9655,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"German","level":"All levels","optional":true},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Centers & Colocation","Financial Software & Embedded Finance","Information Security","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-10-16T04:06:48Z"},{"event":"close","at":"2026-10-16T09:34:19Z"},{"event":"reopen","at":"2026-10-16T09:39:49Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":25,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ntt-data-information-security-manager-sentinel","json_url":"https://alion.io/job/ntt-data-information-security-manager-sentinel.json","meta":{"generated_at":"2026-10-16T12:59:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12301,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50348},"rest":"https://alion.io/mcp/rest/get_company?id=50348"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fntt-data-information-security-manager-sentinel"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fntt-data-information-security-manager-sentinel"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fntt-data-information-security-manager-sentinel"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ntt-data-information-security-manager-sentinel\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fntt-data-information-security-manager-sentinel"}]}