{"id":2672843,"url":"https://alion.io/job/ntt-data-security-engineer-2","title":"Security Engineer","company":{"id":50348,"name":"NTT DATA","domain":"nttdata.com","url":"https://alion.io/company/ntt-data","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"B","score":75,"open_postings":26,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Birmingham, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":63000,"max_usd":144000,"period":"year","method":"role_country_seniority_unknown","sample_n":140},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Azure","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ITIL","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-19T00:00:00Z","employer_posted_date":"2026-09-19","last_verified_at":"2026-10-17T02:22:31Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":28},"description":"What you'll be doing:\nJoin NTT DATA as a SOC Engineer and play a pivotal role in defending clients against evolving cyber threats. You will leverage your expertise in SIEM platforms, threat detection, and incident response to strengthen security operations center (SOC) capabilities. Collaborating with cross-functional teams, you’ll develop automated playbooks, engineering use cases, and deploying advanced detection systems to ensure robust protection in a fast-paced, real-time environment.\nCore Responsibilities\nSIEM Engineering & Analytics\nDeploy, configure, and maintain SIEM platforms such as Splunk, QRadar, Sentinel, and Chronicle to enable robust threat detection.\nNormalize and onboard diverse log sources from cloud and on-premises environments for seamless monitoring.\nDevelop and continually refine SIEM rules and queries for use cases involving advanced threat behaviors and anomaly detection.\nPlaybook Automation & Incident Response\nDesign and implement incident response playbooks for threats such as phishing, lateral movement, malware infections, and more.\nIntegrate response automation into SOAR platforms (e.g., XSOAR, Azure Logic Apps), reducing response times and manual overhead.\nUse feedback from simulated incidents and threat intelligence to refine existing playbooks and workflows.\nThreat Detection & Response\nMonitor security alerts for potential threats, investigate incidents, and coordinate cross-team response activities.\nCollaborate with threat intelligence teams to enhance detection logic and fine-tune resolution processes.\nPerform root-cause analysis (RCA) of recurring incidents and help define corrective actions to reduce future risks.\nThreat Modelling & Use Case Development\nPerform threat modeling using industry frameworks such as MITRE ATT&CK, STRIDE, or the Cyber Kill Chain.\nDesign actionable SIEM use cases, detection rules, and workflows aligned with risk prioritization.\nEvaluate use-case effectiveness through continual testing and KPIs, prioritizing iteration based on business relevance.\nReporting & Documentation\nDevelop dashboards and metrics-driven reports to showcase security posture and incident trends for leadership.\nMaintain detailed documentation of incident procedures, runbooks, playbooks, and analysis reports for audit or team use.\nSupport monthly managerial reporting packs to present SOC effectiveness metrics (e.g., incident response times, detection improvements).\nTraining, Mentorship, & Pre-Sales Support\nProvide mentorship to junior SOC analysts, transferring technical expertise on threat detection and response best practices.\nAssist pre-sales teams by demonstrating SOC tools to prospective clients and refining operational delivery proposals.\nScope, deploy, and operationalize new SOC solutions, benchmarking against industry and client expectations.\nWhat experience you'll bring:\nRequired Qualifications\nTechnical Skills\nProven hands-on experience with SIEM platforms such as Splunk, QRadar, Sentinel, Microsoft Defender, or Chronicle.\nExpertise with SIEM query languages (e.g., KQL, SPL, AQL) and strong knowledge of log normalization and parsing.\nProficiency in scripting (e.g., Python, PowerShell) to automate tasks and build SOC efficiencies.\nDeep familiarity with cyber threat detection techniques related to frameworks like MITRE ATT&CK and vulnerability management.\nExperience managing ITIL processes, including Incident, Problem, and Change Management.\nCertifications Required\nCISSP, GIAC, SC-200, Splunk Power User/Admin, QRadar Specialist, or Chronicle Security Engineer certifications preferred.\nCandidates must be eligible to obtain UK SC clearance.\nProfessional Skills\nStrong analytical and communication skills to present complex information to technical and non-technical stakeholders.\nExperienced in collaborative team dynamics and independent problem-solving.\nProven ability to transfer knowledge and mentor junior SOC team members effectively.\nWho we are:\nAt NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co-innovate solutions with clients and partners globally for business and societal impact. Serving 75% of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&D. Make this the place where you belong, learn, and build your network. Make this the place where you grow.\nwhat we'll offer you:\nWe offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.\nYou can find more information about NTT DATA UK & Ireland here: https://uk.nttdata.com/\nWe are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.\nBack to search\nEmail to a friend\nApply now","description_format":"text","description_chars":5888,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Centers & Colocation","Financial Software & Embedded Finance","IT Consulting & Digital Transformation","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-10-16T04:25:42Z"},{"event":"close","at":"2026-10-16T04:27:16Z"},{"event":"reopen","at":"2026-10-16T09:37:27Z"},{"event":"close","at":"2026-10-16T09:39:49Z"},{"event":"reopen","at":"2026-10-16T14:04:16Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-10-16T06:21:30+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.564,"p_room":0.55,"age_days":28,"expected_fill_days":25,"reasons":["conf:2","win:tail","comp:brand"],"computed_at":"2026-10-17T05:20:11Z"},"pay":null,"html_url":"https://alion.io/job/ntt-data-security-engineer-2","json_url":"https://alion.io/job/ntt-data-security-engineer-2.json","meta":{"generated_at":"2026-10-17T05:20:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7162,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50348},"rest":"https://alion.io/mcp/rest/get_company?id=50348"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fntt-data-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fntt-data-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fntt-data-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ntt-data-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fntt-data-security-engineer-2"}]}