{"id":3013609,"url":"https://alion.io/job/ntt-data-principal-security-platforms-engineer","title":"Principal Security Platforms Engineer","company":{"id":50348,"name":"NTT DATA","domain":"nttdata.com","url":"https://alion.io/company/ntt-data","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":94,"open_postings":105,"ghost_share":0,"stale_share":0.229,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Johannesburg, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":30000,"max_usd":79000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":679},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"GCP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-21T15:57:00Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-22T22:38:57Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Make an impact with NTT DATA\nJoin a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it’s a place where you can grow, belong and thrive.\nYour day at NTT DATA\nRole Summary\nThe Principal Security Platforms Engineer serves as a subject matter expert for the MSSP's Palo Alto Cortex XSIAM platform but is not limited to and associated security operations technologies. The role is responsible for the strategic evolution, architecture, engineering, automation, onboarding, Agentic AI and operational excellence of the security platforms ecosystem incl. XSIAM.\nThe successful candidate will provide technical leadership across platform architecture, log onboarding and normalization, detection engineering, automation, content development, integrations, and advanced troubleshooting while acting as a technical mentor and escalation point for engineering and SOC teams.\nThis role combines Security Architecture, Security Engineering, Detection Engineering and Automation Engineering responsibilities to ensure the security platform continuously evolves to support managed security services, threat detection, incident response and customer onboarding requirements.\nKey Responsibilities\nXSIAM and Other Security Platforms:\nSupport the overall architecture, roadmap, and strategic evolution of the MSSP Cortex XSIAM platform and other security platforms.\nDesign and maintain multi-tenant service architecture supporting managed security services customers alongside capability teams.\nLead platform architecture reviews and recommend improvements to scalability, performance, resilience and cost optimization.\nAct as trusted advisor for onboarding, architecture, use-case development and platform optimization initiatives.\nLead and build new service platform and automation for the SOC/security services\nSupport platform upgrades, new integrations design, build and enhance, and feature adoption within XSIAM and other associated security platforms\nAct as L4 escalation support for complex platform issues such platform disruptions, ingestion failures, automation failures and detection gaps.\nAct as an advisor for the development and optimization of:Correlation and Suppression Rules\nAlert tuning strategies and Threat intelligence integrations\n\nSupport to develop and maintain XQL-based use cases and detection logic.\nSupport in improving the detection coverage by aligning content against MITRE ATT&CK techniques.\nSupport in continuous reduction of false positives and alert fatigue.\nReview detection performance and recommend improvements based on threat trends and SOC feedback.\nEngage directly with vendor TAC and engineering teams on critical incidents.\nProvide technical leadership and guidance to SOC, Engineering, and Customer Success teams.\nReview customer requirements and recommend security monitoring strategies.\nDevelop and maintain:Platform standards\nEngineering procedures\nIntegration guides\n\nDocument and share operational and engineering knowledge across teams. Mentor Platform, Detection, and SOC Engineers and Analysts.\nDrive technical best practices across the MSSP security engineering function.\nKnowledge and Attributes\nStrong knowledge of Cortex XSIAM architecture and operations, SIEM, SOAR, XDR, detection engineering, and modern SOC practices.\nWorking knowledge of Python, PowerShell, Rest APIs, KQL, and XQL.\nDeep expertise in security telemetry normalization, correlation, MITRE ATT&CK, threat detection, automation, and orchestration.\nStrong cloud security experience across Azure, AWS, and GCP. Excellent analytical, troubleshooting, consulting, stakeholder engagement, communication, mentoring, and technical leadership skills, with the ability to independently drive complex platform initiatives.\nAcademic Qualifications and Certifications\nBachelor's degree in Information Technology, Cyber Security, Computer Science or related field.\nPalo Alto Networks Cortex XSIAM Engineer certification (advantageous).\nRelevant cloud security certifications across Azure, AWS or GCP.\nCISSP, CISM, CCSP or equivalent security certifications preferred.\nRequired Experience\n10+ years in Cyber Security Engineering, Security Operations, or Security Architecture.\n2+ years hands-on experience with Palo Alto Cortex XSIAM/XDR.\nExperience onboarding and normalizing SIEM/XDR telemetry and developing XQL queries, correlation rules, and detection content.\nExperience with automation, orchestration, APIs, Broker-VMs, and cloud-native integrations.\nExperience supporting MSSP or enterprise SOC environments and troubleshooting large-scale platform and ingestion issues.\nStrong knowledge of EDR/XDR, SIEM, SOAR, Threat Intelligence, Vulnerability Management, and Cloud Security.\nExperience with Python or PowerShell, REST APIs, and automation frameworks.\nExperience working with security vendors and technical support teams.\nStrong knowledge of network protocols, Linux, Windows, and cloud infrastructure.\nWorkplace type:\nHybrid WorkingAbout NTT DATA\nNTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune\nGlobal 100. We are committed to accelerating client success and positively impacting society through\nresponsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with\nunmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and\napplication services. Our consulting and industry solutions help organizations and society move\nconfidently and sustainably into the digital future. As a Global Top Employer, we have experts in more\nthan 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as\nestablished and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each\nyear in R&D.\nEqual Opportunity Employer\nNTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.\nThird parties fraudulently posing as NTT DATA recruiters\nNTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.","description_format":"text","description_chars":6982,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"South Africa","iso":"ZA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Health Care","Information Technology","Data Centers & Colocation"],"lifecycle":[{"event":"open","at":"2026-10-21T15:57:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":22,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/ntt-data-principal-security-platforms-engineer","json_url":"https://alion.io/job/ntt-data-principal-security-platforms-engineer.json","meta":{"generated_at":"2026-10-23T02:10:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3598,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50348},"rest":"https://alion.io/mcp/rest/get_company?id=50348"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fntt-data-principal-security-platforms-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fntt-data-principal-security-platforms-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fntt-data-principal-security-platforms-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ntt-data-principal-security-platforms-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fntt-data-principal-security-platforms-engineer"}]}