<div><b>Rackspace Cyber Defense </b></div><div><b>Cyber Threat Intelligence Analyst, Security Operations </b></div><div><b> </b></div><div>About Rackspace Cyber Defence</div><div>Rackspace Cyber Defence is our next generation cyber defense and security operations capability that builds on 20+ years of securing customer environments to deliver proactive, risk-based, threat-informed and intelligence-driven security services.  </div><div><b>Our purpose</b> is to enable our customers to defend against the evolving threat landscape across on-premises, private cloud, public cloud, and multi-cloud workloads. </div><div><b>Our goal</b> is to go beyond traditional security controls to deliver cloud-native, DevOps-centric, fully integrated 24x7x365 cyber defense capabilities that delivers a <b>proactive</b>, <b>threat-informed</b>, <b>risk-based</b>, <b>intelligence-driven</b> approach to detecting and responding to threats. </div><div><b>Our mission</b> is to help our customers: </div><div><span>•</span><span>       </span>Proactively detect and respond to cyber-attacks – 24x7x365. </div><div><span>•</span><span>       </span>Defend against new and emerging risks that impact their business. </div><div><span>•</span><span>       </span>Reduce their attack surface across private cloud, hybrid cloud, public cloud, and multi-cloud environments. </div><div><span>•</span><span>       </span>Reduce their exposure to risks that impact their identity and brand. </div><div><span>•</span><span>       </span>Develop operational resilience. </div><div><span>•</span><span>       </span>Maintain compliance with legal, regulatory and compliance obligations. </div><h3> What we’re looking for </h3><ul><li>We are seeking a skilled and proactive Cyber Threat Intelligence Analyst (3-5 years) to join our team and contribute to delivering a Fanatical Experience™ to our customers.</li><li>This role is ideal for an individual with a strong background in threat intelligence gathering, analysis, and reporting, as well as hands-on experience in threat hunting and translating intelligence into actionable insights.</li><li>Incident Handling and Managing Cloudsek Platform.</li><li>As a Threat Intelligence Analyst, you will be responsible for identifying and analyzing emerging cyber threats, conducting threat hunting (good to have Sentinel Exp) activities to uncover hidden risks, and producing detailed reports to inform and support security operations. Your expertise will help enhance the overall security posture of our customers through proactive intelligence and actionable recommendations. </li></ul><h3>Key Responsibilities</h3><ul><li>Lead and      perform proactive threat hunting across multiple customers or      organizational estates using available data and threat intelligence.</li><li>Create,      test, and iterate threat hunting hypotheses to uncover undetected      malicious activity.</li><li>Leverage      Cyber Threat Intelligence (CTI) feeds and tooling to track threat actor      TTPs and deliver contextual insights relevant to the organization.</li><li>Design and      implement custom detection rules in SIEM platforms, particularly Microsoft      Sentinel.</li><li>Handling Cloud      Sek Platform incidents (Dark web detections, Credential Leaks, Compromised      Computer.)</li><li>Collaborate      with detection engineers, SOC analysts, and other stakeholders to improve      detection content and response workflows.</li><li>Contribute      to incident response activities by supporting triage, investigation, and      root cause analysis of cybersecurity events.</li><li>Support      risk and threat modelling initiatives by providing timely threat input and      context.</li><li>Deliver      timely high-quality reporting (including executive briefings and technical      analysis) on emerging threats and threat actor trends.</li><li>Manage and      curate threat intelligence watchlists, enrich detections with threat data,      and assist SOC teams with relevant contextual insights.</li><li>Support      insider threat monitoring and vulnerability risk assessments.</li><li>Participate      in detection engineering efforts by identifying opportunities for new or      enhanced analytics.</li><li>Communicate      threat relevance to technical and non-technical stakeholders clearly and      concisely.</li><li>Maintain      an active awareness of the evolving cyber threat landscape, particularly      as it pertains to your sector.</li><li>Liaise      with Corporate Enterprise Security for indicator and threat sharing. </li><li>Drive      iterative non-technical process improvement and documentation to minimize      process friction to eliminate waste and drive consistency. </li></ul><h3>Essential Skills and Experience</h3><ul><li>Experience      in Threat Hunting and Cyber Threat Intelligence. (3-5 years)</li><li>Experience in analyzing large datasets for threat patterns.</li><li>Strong      understanding of threat actor behaviours, attack chains, and TTPs.</li><li>Practical      experience using SIEM platforms (ideally Microsoft Sentinel) and writing      KQL queries.</li><li>Strong      Handon on Exp on Cloud Sek Platform,</li><li>Understanding      of threat modelling, risk management, and MITRE ATT&amp;CK framework.</li><li>Experience      supporting or collaborating with Security Operations Center (SOC) teams.</li><li>Understanding      of Windows and/or Linux telemetry and analysis techniques.</li><li>Knowledge      of network protocols and how they may be exploited.</li><li>Experience      executing security incident response workflows and processes.</li><li>Ability to      triage and respond to threat intelligence alerts from multiple sources.</li><li>Strong      written and verbal communication skills to effectively deliver technical      and executive-level briefings.</li></ul><h3>Desirable Skills</h3><ul><li>Experience      with Microsoft Defender XDR Suite (Defender for Cloud, Server, Endpoint,      Office 365, Identity).</li><li>Microsoft      Sentinel</li><li>Cloud SEK Platform</li><li>Crowdstrike,      Falcon</li><li>Qualys</li><li>Familiarity      with Microsoft Entra, Purview, and Azure technologies.</li><li>Knowledge      of NIST CSF, and other common security frameworks.</li><li>Experience      working with STIX and TAXII or equivalent for TI normalization and sharing</li><li>Hands-on      experience with detection creation and automation workflows using GitHub.</li><div>·       Familiarity with scripting (python, JS, Powershell) for automation/analysis data processing.</div><li>Experience      working in Agile environments and cross-functional teams.</li><li>Relevant      certifications such as:</li><li><b>Microsoft</b>: SC-200, AZ-500,       MS-500, SC-300</li><li><b>GIAC</b>: GCTI, GCFA, GREM, GCIA</li><li><b>Other</b>: CISSP, CISA, CISM,       CompTIA Security+/Cloud+, CCSK</li></ul><h3>About Rackspace Technology </h3><ul><li>We are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future. </li><li> </li><li>More about Rackspace Technology </li><li>Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know. </li></ul>