NTT DATA Hiring 2026: Security Managed Services Engineer (L1) | Mumbai (On-Site)

Company: NTT DATA
Job Title: Security Managed Services Engineer (L1)
Practice / Group: Cybersecurity & Infrastructure Managed Services
Work Arrangement: On-site Working
Employment Type: Full-time (Shift Operations)
Experience Level: Entry Level (0 to 2 Years / Fresh Graduates with IT/Networking Degree)
Location: Mumbai, Maharashtra, India

NTT DATA is a $30+ billion global IT services leader and one of the world’s largest digital and cybersecurity infrastructure providers. Serving 75% of the Fortune Global 100, NTT DATA operates world-class Security Operations Centers (SOCs) and Managed Security Services (MSS) hubs across 50+ countries.

The Security Managed Services Engineer (L1) position operates from NTT DATA’s delivery hub in Mumbai. Acting as the first line of defense for global enterprise clients, L1 engineers monitor client firewall infrastructure, investigate security alerts, execute patch maintenance windows, and ensure zero missed Service Level Agreements (SLAs) within ITIL-driven IT service management workflows.

• 24/7 Security & Firewall Monitoring: Continuously monitor client perimeter firewalls, network security appliances, and intrusion prevention systems (IPS) to detect operational errors and security anomalies.
• First-Line Incident Triage & Resolution: Investigate L1 security incidents, perform root cause analysis (RCA) for standard low-complexity issues, and route complex threats to appropriate L2/L3 resolver groups.
• SLA & Queue Management: Maintain zero missed SLA conditions for client ticket queues, providing timely updates via ticketing tools, phone, and chat support.
• Maintenance & Patching Windows: Schedule and execute maintenance windows for firewall firmware updates, security patching, and configuration changes.
• Shift Handover & ITIL Compliance: Execute formal shift handover protocols, update knowledge base (KB) articles, and follow standard ITIL incident, problem, and change management workflows.
• Disaster Recovery & Project Support: Assist in implementing Disaster Recovery (DR) testing, redundancy validation, and supporting security migration projects as required.

Academic Background

• Degree: Bachelor’s degree in Information Technology, Computer Science, Computer Engineering, or an equivalent technical discipline (or demonstrated equivalent work experience).

Experience & Technical Competencies

• Experience Level: 0 to 2 years of experience in troubleshooting and providing first-line support in network security, SOC monitoring, data center, or system administration within an IT services organization.
• Network & Security Foundations: Basic knowledge of firewalls (Palo Alto, Fortinet, Check Point, or Cisco ASA), TCP/IP protocols, routing/switching, VPNs, and redundancy concepts.
• Process & Frameworks: Working knowledge of ITIL processes (Incident Management, Change Requests, SLA Tracking).

Preferred Certifications

• Cisco Certified Network Associate (CCNA) or equivalent entry-level network security certifications (e.g., CompTIA Security+, Fortinet NSE 1-3). Certifications carry significant weight during profile shortlisting.

• Estimated Starting Salary: ₹3.8 LPA to ₹6.2 LPA (CTC) for L1 entry-level engineers, depending on network certifications (CCNA), shift flexibility, and assessment performance.
• NTT DATA Corporate Perks:
  • Direct hands-on operational exposure to enterprise-grade SOC tools and multi-vendor firewall platforms.
  • Access to NTT DATA’s global learning academies, certification sponsorships (Palo Alto, Fortinet, AWS Security), and career pathways toward L2 SOC Analyst and Security Architect roles.
  • Comprehensive Health, Personal Accident, and Term Life Insurance for employees and dependents.
  • Night shift allowances and transport facilities per company policy for on-site operations.

1. Profile Application & Screening
   (Verification of IT/CS degree, CCNA certification status, & Mumbai on-site/shift readiness)
   ↓
2. Online Technical & Aptitude Assessment
   (Sections covering Networking Fundamentals [TCP/IP, OSI Layers], Firewall Basics, ITIL Concepts, & Aptitude)
   ↓
3. Technical Interview Round 1 (Networking & Security L1 Concepts)
   (Questions on IP addressing, subnetting, NAT/PAT, port numbers, firewall policies, VPNs, & ping/traceroute/syslog)
   ↓
4. Technical Interview Round 2 (Incident Triage & Scenario Scenarios)
   (Evaluation of SLA prioritization, ITIL incident workflows, log reading, shift handovers, & troubleshooting steps)
   ↓
5. HR & Managerial Discussion (Culture, Shift Flexibility & Offer Rollout)
   (Confirmation of Mumbai on-site commitment, 24/7 rotational shift agreement, salary, & onboarding)

• Networking Core: OSI Model, TCP/IP stack, Subnetting (IPv4/IPv6), DNS, DHCP, NAT/PAT, VLANs, and routing protocols (OSPF, BGP basics).
• Firewall & Security Basics: Stateful vs. Stateless inspection, Access Control Lists (ACLs), IPsec/SSL VPN tunnels, IDS/IPS signatures, and common port numbers (e.g., 22, 53, 80, 443, 8080).
• ITIL & Incident Operations: Severity levels (P1 to P4), Service Level Agreements (SLAs), MTTR (Mean Time to Resolve), Ticket escalation procedures, and Root Cause Analysis (RCA).

• Security Operations: Security Managed Services Engineer, L1 Security Support, Firewall Monitoring, First-Line Support, Incident Investigation, Root Cause Analysis (RCA)
• Networking & Protocols: CCNA, TCP/IP, Subnetting, Access Control Lists (ACLs), VPN, NAT, Network Security, Monitoring Agents, Redundancy Concepts
• Frameworks & Process: ITIL Processes, Incident Management, SLA Compliance, Shift Handover, Disaster Recovery (DR), Knowledge Base Articles
• NTT DATA Specifics: NTT DATA Mumbai, On-site Working, Managed Security Services (MSS), SOC Operations

1. What is the work model and location for this role?

This is a 100% On-site position based at NTT DATA’s facility in Mumbai, Maharashtra, India.

2. Are fresh graduates eligible to apply?

Yes. Fresh graduates with a Bachelor’s degree in IT/Computing or Computer Science and strong foundational knowledge in networking and security are eligible.

3. Are certifications required for this position?

While a Bachelor’s degree is required, holding a CCNA or an equivalent entry-level network security certification is explicitly highlighted as a major advantage.

4. What are the key tools and processes involved?

The role revolves around monitoring enterprise firewall infrastructure, utilizing ticketing/monitoring tools, and adhering strictly to ITIL incident management workflows.