{"id":2253747,"url":"https://alion.io/job/nttdata-information-security-manager-sentinel","title":"Information Security Manager (Sentinel)","company":{"id":4401319,"name":"NTT DATA Romania","domain":"nttdata.ro","url":"https://alion.io/company/nttdata-ro","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Timișoara, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":39000,"max_usd":93000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1891},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"Ansible","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-08T02:01:00Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-12T11:40:09Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Who we are\nNTT DATA is one of the world's largest global security service providers, partnering with some of the most recognized security technology brands. We're looking for passionate, curious, and motivated individuals to join our team.\nOur mission is to protect and empower organizations through cutting-edge Managed Detection and Response (MDR) solutions, deep technical expertise, and a client-first mindset.\nWe are seeking an experienced Cybersecurity professional with strong expertise in Microsoft Sentinel, security operations, threat detection, and cloud security, who can combine hands-on engineering capabilities with a trusted advisor approach towards our customers.\nWhat you'll be doing\nBuild strong, meaningful “trusted advisor” relationships with clients on behalf of NTT DATA and act as the main Cybersecurity Advisor for one or more customers.\nDesign, implement, maintain, and optimize Microsoft Sentinel environments, ensuring proper configuration, data ingestion quality, and alignment with customer security objectives.\nDevelop, refine, and optimize detection rules, analytics, workbooks, dashboards, and advanced KQL queries for threat detection, hunting, investigation, and reporting.\nSupport customers in optimizing the detection, response, mitigation, and reporting of cybersecurity threats within their environments.\nLead and support threat hunting activities using Microsoft Sentinel, Microsoft Defender XDR, and relevant Threat Intelligence sources.\nOversee the onboarding and integration of new log sources, ensuring appropriate mapping, normalization, governance, and data quality.\nContinuously tune alerts, analytics rules, data connectors, and detection logic to improve accuracy and reduce the signal-to-noise ratio.\nProvide expertise across Network/Perimeter/Cloud Security, SecOps, Threat Intelligence, EDR, and detection capabilities.\nAnalyze network traffic and security telemetry and design relevant detection use cases based on identified risks and attack patterns.\nPropose recommendations for improving customers' cybersecurity posture and reducing identified risks.\nProduce comprehensive technical documentation, including use cases, detection logic, response procedures, runbooks, and architectural diagrams.\nCollaborate with SOC analysts, security engineers, cloud teams, application owners, and customer stakeholders to ensure coordinated incident response and remediation activities.\nSupport SOAR playbook development using Logic Apps to automate triage, response actions, and security workflows.\nAct as a Subject Matter Expert (SME) in Cybersecurity and MDR solutions, providing technical guidance and mentorship to junior team members and cross-functional teams.\nStay up to date with emerging cybersecurity threats, technologies, attack techniques, and industry trends and translate them into improvements to detection and response capabilities.\nReview cybersecurity processes, procedures, runbooks, response workflows, and training programs aligned with organizational risk and industry standards.\nWhat you'll bring along\nBachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.\nMinimum 5-7 years of professional experience in IT Cybersecurity, Security Operations, Detection Engineering, MDR, or a similar role.\nExtensive hands-on experience administering and engineering Microsoft Sentinel solutions, including analytics rules, automation, log management, and data connectors.\nStrong proficiency in KQL, with the ability to develop complex queries for threat detection, investigation, hunting, and reporting.\nStrong knowledge of SIEM, SOAR, EDR, firewalls, IDS/IPS, and other security technologies.\nPractical experience with Microsoft Defender XDR solutions, including Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps.\nVery good knowledge of Azure and cloud security concepts, including identity management, network security controls, and cloud-native security architecture.\nTechnical understanding of common Microsoft environments and technologies such as Entra ID, Microsoft 365, Active Directory, and Exchange.\nDeep understanding of security monitoring, threat detection methodologies, incident response, threat hunting, and SOC operations.\nStrong understanding of log source onboarding, normalization, and integration within Microsoft Sentinel.\nUnderstanding of cybersecurity domains such as network security, endpoint security, anomaly detection, Threat Intelligence, and cloud security.\nGood knowledge of the MITRE ATT&CK Framework and its application to detection engineering and threat hunting.\nAbility to perform network traffic analysis and translate findings into relevant detection and monitoring use cases.\nExperience integrating Microsoft Sentinel with third-party log sources, security tools, and other SIEM platforms such as Palo Alto XSIAM or Splunk is an advantage.\nKnowledge of scripting and automation technologies such as Python, Bash, PowerShell, Logic Apps, Ansible, or Terraform.\nKnowledge of security models, industry best practices, and generally accepted information security principles.\nLinux experience is considered an advantage.\nStrong communication, stakeholder management, and documentation skills, with the ability to translate complex technical concepts into clear and actionable recommendations.\nAbility to work effectively in a customer-facing environment and communicate with both technical and non-technical stakeholders.\nRelevant certifications such as SC-200, SC-100, AZ-500, CISSP, CISM, SANS GCDA, SANS GCED, or other GIAC certifications are highly desirable.\nAbility and willingness to travel domestically and internationally when required.\nProficiency in English is mandatory; German language skills are an advantage.","description_format":"text","description_chars":5826,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"German","level":"All levels","optional":true},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-11T03:22:23Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":28,"reasons":["conf:3","win:early"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/nttdata-information-security-manager-sentinel","json_url":"https://alion.io/job/nttdata-information-security-manager-sentinel.json","meta":{"generated_at":"2026-10-12T19:03:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30697,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4401319},"rest":"https://alion.io/mcp/rest/get_company?id=4401319"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnttdata-information-security-manager-sentinel"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnttdata-information-security-manager-sentinel"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnttdata-information-security-manager-sentinel"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nttdata-information-security-manager-sentinel\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnttdata-information-security-manager-sentinel"}]}