[Hiring] Information Security Incident Response Manager @NTT DATA Services

Role Description

We are currently seeking an Information Security Incident Response Manager to join our team in Remote, México (MX-MEX), Mexico (MX).

Key Responsibilities:

• Manages the prevention and resolution of security breaches and ensure incident and problem management processes are initiated.
• Performs access management activities according to the policy.
• Implements and discusses security service audit schedules, review access authorization and perform the required access controls and testing to identify security weaknesses.
• Interacts with a global team of Cyber Security Analysts and specialists.
• Manages 2nd level triaging of security alerts, events, and notifications.
• Manages notifications of internal and/or external teams according to agreed alert priority levels, and escalation trees.
• Communicates status of response, resolution and final root cause analysis to the appropriate stakeholders.
• Follows and updates established and/or ad-hoc processes and work instructions and create procedures where deficiencies are identified.
• Logs, manages and coordinates service requests through to resolution including the identification, isolation, resolution and escalation of IT infrastructure faults.
• Maintains an understanding of current and emerging threats, vulnerabilities, and trends.

Qualifications

• Advanced understanding of End Point Protection Software.
• Advanced understanding of Enterprise Detection and Response software.
• Advanced knowledge of technological advances within the information security arena.
• Advanced understanding of inter-relationships in an overall system or process.
• Advanced knowledge of information security management and policies.
• Advanced understanding risk management principles and frameworks is crucial for prioritizing and addressing security incidents.
• Advanced understanding of the organization's business operations, goals, and objectives enables the analyst to align incident response efforts with the broader business strategy.
• Ability to effectively communicate technical information to both technical and non-technical stakeholders, and end-users, as well as working with cross-functional teams during incident response.
• Ability to think critically, analyze information, and solve medium to complex problems.

Requirements

• Bachelor’s degree or equivalent in Information Technology, Computer Science or related preferred.
• SANS GIAC Security Essentials (GSEC) or equivalent preferred.
• SANS GIAC Certified Intrusion Analyst (GCIA) or equivalent preferred.
• SANS GIAC Certified Incident Handler (GCIH) or equivalent preferred.
• Advanced experience in a Technology Information Security Industry.
• Advanced experience or knowledge of SIEM and IPS technologies.
• Advanced experience with Wireshark or tcpdump to identify normal and abnormal/malicious traffic patterns and behaviors.