Information Security Manager (Sentinel)

Requirements

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field
• Minimum 5-7 years of professional experience in IT Cybersecurity, Security Operations, Detection Engineering, MDR, or a similar role
• Extensive hands-on experience administering and engineering Microsoft Sentinel solutions, including analytics rules, automation, log management, and data connectors
• Strong proficiency in KQL, with the ability to develop complex queries for threat detection, investigation, hunting, and reporting
• Strong knowledge of SIEM, SOAR, EDR, firewalls, IDS/IPS, and other security technologies
• Practical experience with Microsoft Defender XDR solutions, including Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps
• Very good knowledge of Azure and cloud security concepts, including identity management, network security controls, and cloud-native security architecture
• Technical understanding of common Microsoft environments and technologies such as Entra ID, Microsoft 365, Active Directory, and Exchange
• Deep understanding of security monitoring, threat detection methodologies, incident response, threat hunting, and SOC operations
• Strong understanding of log source onboarding, normalization, and integration within Microsoft Sentinel
• Understanding of cybersecurity domains such as network security, endpoint security, anomaly detection, Threat Intelligence, and cloud security
• Good knowledge of the MITRE ATT&CK Framework and its application to detection engineering and threat hunting
• Ability to perform network traffic analysis and translate findings into relevant detection and monitoring use cases
• Experience integrating Microsoft Sentinel with third-party log sources, security tools, and other SIEM platforms such as Palo Alto XSIAM or Splunk is an advantage
• Knowledge of scripting and automation technologies such as Python, Bash, PowerShell, Logic Apps, Ansible, or Terraform
• Linux proficiency
• Knowledge of security models, industry best practices, and generally accepted information security principles
• Strong communication, stakeholder management, and documentation skills, with the ability to translate complex technical concepts into clear and actionable recommendations
• Ability to work effectively in a customer-facing environment and communicate with both technical and non-technical stakeholders
• Proficiency in English is mandatory

Nice to have:

• Relevant certifications such as SC-200, SC-100, AZ-500, CISSP, CISM, SANS GCDA, SANS GCED, or other GIAC certifications
• German language skills

Important Details

• Availability for 24x7 on-call rotation
• Willingness to travel domestically and internationally when required

About the Company

NTT DATA is one of the world's largest global security service providers, partnering with recognized security technology brands. Their mission is to protect and empower organizations through cutting-edge Managed Detection and Response (MDR) solutions, deep technical expertise, and a client-first mindset.