{"id":2669657,"url":"https://alion.io/job/ntt-data-senior-information-security-incident-response-lead","title":"Senior Information Security Incident Response Lead","company":{"id":50348,"name":"NTT DATA","domain":"nttdata.com","url":"https://alion.io/company/ntt-data","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"B","score":76,"open_postings":24,"ghost_share":0,"stale_share":0.958,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Jakarta, Indonesia"],"countries":["ID"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":54000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false},{"name":"Zeek","optional":false},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-09-19T00:00:00Z","employer_posted_date":"2026-09-19","last_verified_at":"2026-10-20T17:46:26Z","board_verified":true,"closed_at":null,"days_open":31,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":31},"description":"Make an impact with NTT DATA\nJoin a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it’s a place where you can grow, belong and thrive.\nKey Responsibilities:\nLead and manage complex security incidents, acting as a key contact for stakeholders.\nPerform deep analysis of security alerts to identify, mitigate, and remediate threats.\nConduct forensic investigations on compromised hosts, networks, and cloud environments.\nProactively hunt for adversarial activity and anomalous behaviors across large datasets.\nAnalyze malware samples (basic level) to determine functionality, impact, and mitigation strategies.\nDevelop and refine detection rules, improving alert fidelity and response workflows.\nContribute to threat intelligence gathering, analyzing attack patterns, and enhancing defensive strategies.\nParticipate in red teaming or penetration testing activities to identify and remediate vulnerabilities.\nProvide strategic recommendations for improving the organization’s security posture.\nCreate detailed incident reports, threat intelligence assessments, and executive summaries.\nMentor and provide guidance to junior analysts, fostering continuous improvement in IR methodologies.\nQualifications & Requirements\nEducation & Experience:\nBachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.\nMinimum of 5 years of experience in cybersecurity, with at least 2 years in incident response, threat hunting, or forensic analysis.\nTechnical Expertise:\nExtensive experience responding to targeted attacks from APT groups, cybercriminals, and nation-state actors.\nStrong forensic analysis skills across Windows, Linux, and macOS systems.\nExpertise in network forensics, traffic analysis, and packet inspection (Wireshark, Zeek).\nProficiency in SIEM platforms (Splunk, Sentinel, QRadar) and EDR solutions (CrowdStrike, Microsoft Defender ATP).\nKnowledge of malware analysis techniques, including static and dynamic analysis.\nFamiliarity with cloud security investigations (AWS, Azure, GCP).\nStrong scripting skills in Python, PowerShell, or similar languages for automation.\nUnderstanding of security architecture, authentication mechanisms, and enterprise IT operations is a plus.\nExperience with vulnerability management, red teaming, or penetration testing is a plus.\nFamiliarity with MITRE ATT&CK framework and various cyber threat intelligence methodologies.\nPreferred Certifications:\nGIAC (GCFA, GNFA, GCIH, GCIA, GREM)\nCISSP (Certified Information Systems Security Professional)\nCEH (Certified Ethical Hacker)\nOSCP (Offensive Security Certified Professional)\nCloud Security Certifications (AWS Security Specialty, Microsoft Azure Security)\nKey Competencies:\nStrong analytical and problem-solving skills in high-pressure situations.\nAbility to manage multiple investigations efficiently while meeting deadlines.\nExcellent verbal and written communication skills, with the ability to convey technical details to varied audiences.\nStrong team collaboration and leadership skills, with a proactive approach to knowledge sharing.\nAbility to work in a fast-paced environment and adapt to evolving threats and challenges.\n#LI-APAC\nWorkplace type:\nAbout NTT DATA\nNTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.\nEqual Opportunity Employer\nNTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.","description_format":"text","description_chars":4729,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","Health Care","Data Centers & Colocation"],"lifecycle":[{"event":"open","at":"2026-10-16T03:59:09Z"},{"event":"close","at":"2026-10-16T04:02:34Z"},{"event":"reopen","at":"2026-10-16T04:04:47Z"},{"event":"close","at":"2026-10-16T04:06:48Z"},{"event":"reopen","at":"2026-10-16T04:09:52Z"},{"event":"close","at":"2026-10-16T04:22:20Z"},{"event":"reopen","at":"2026-10-16T09:31:40Z"},{"event":"close","at":"2026-10-16T09:39:49Z"},{"event":"reopen","at":"2026-10-16T14:04:16Z"},{"event":"close","at":"2026-10-16T18:19:10Z"},{"event":"reopen","at":"2026-10-16T22:29:23Z"},{"event":"close","at":"2026-10-18T22:03:11Z"},{"event":"reopen","at":"2026-10-19T01:24:23Z"},{"event":"close","at":"2026-10-19T12:52:11Z"},{"event":"reopen","at":"2026-10-19T16:51:46Z"},{"event":"close","at":"2026-10-19T20:45:39Z"},{"event":"reopen","at":"2026-10-20T08:42:02Z"}],"visa":[],"liveness":{"score":37,"band":"fade","label":"Fading","p_open":1,"p_active":0.664,"p_room":0.55,"age_days":31,"expected_fill_days":22,"reasons":["conf:3","win:tail","comp:brand"],"computed_at":"2026-10-20T21:26:19Z"},"pay":null,"html_url":"https://alion.io/job/ntt-data-senior-information-security-incident-response-lead","json_url":"https://alion.io/job/ntt-data-senior-information-security-incident-response-lead.json","meta":{"generated_at":"2026-10-20T21:26:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24943,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50348},"rest":"https://alion.io/mcp/rest/get_company?id=50348"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fntt-data-senior-information-security-incident-response-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fntt-data-senior-information-security-incident-response-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fntt-data-senior-information-security-incident-response-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ntt-data-senior-information-security-incident-response-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fntt-data-senior-information-security-incident-response-lead"}]}