Information Security Analyst (remote working) in London

We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it’s a place where you can grow, belong and thrive.Job Description SummaryThe Information Security Incident Response Analyst supports clients during security incidents by performing technical investigations, analyzing digital forensic evidence, and assisting with containment and remediation activities. They contribute to process improvements, maintain strong client communication, and continue building advanced DFIR skills through hands‑on investigations and internal project work.Job DescriptionKey ResponsibilitiesInvestigates security incidents by performing host, disk, memory, network, and cloud forensic analysis under established processes and guidance.Analyzes artifacts across Windows, Linux, and macOS systems, helping reconstruct timelines and determine root cause.Participates in the team’s on‑call rotation for urgent incident response needs.Identifies observable gaps and risks within client environments and recommends improvements to strengthen security posture.Knowledge and AttributesSolid understanding of digital forensics fundamentals, including host‑based analysis across major operating systems.Working knowledge of network forensics, cloud log analysis (e.g., Azure, AWS, GCP), and common forensic tools.Required ExperienceProven experience in incident response and digital forensics, with capability in host‑based, image, and log analysis.Experience using SIEM, EDR, IDS/IPS, and other security tools to triage, investigate, and respond to incidents.Ability to perform network analysis using tools such as Wireshark, tcpdump, and other tools.Experience in cybersecurity operations, consulting, DFIR services, or related technical security roles.Academic Qualifications, CertificationsBachelor’s degree or equivalent experience in Information Technology, Computer Science, Cybersecurity, or a related discipline (preferred).Relevant certifications such as:SANS GIAC Security Essentials (GSEC) or equivalent preferred.GICSP - GIAC Global Industrial Cyber Security ProfessionalGRID - GIAC Response and Industrial DefenseGCIP - GIAC Critical Infrastructure ProtectionISA/IEC 62443 Cybersecurity Certificates (ISA/IEC 62443 Cybersecurity Fundamentals, etc.)Additional UK‑Specific Role RequirementsUK Security ClearanceActive UK Security Clearance is required to deliver services within sensitive or regulated client environments.Operational Technology (OT) Incident Response & Digital ForensicsBackground and hands‑on experience in OT environments.Experience investigating ICS/SCADA systems and industrial sectors such as manufacturing, energy, utilities, or critical infrastructure.Remote WorkingAbout NTT DATANTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.Equal Opportunity EmployerNTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Third parties fraudulently posing as NTT DATA recruitersNTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.Full time