<div><b>Rackspace Security (Public Cloud)</b></div><div><b>Security Engineer L3 (Endpoint Security)</b></div><div> </div><div><b>About Rackspace Cyber Defence</b></div><div>Rackspace Cyber Defence is our next generation cyber defence and security operations capability that builds on 20+ years of securing customer environments to deliver proactive, risk-based, threat-informed and intelligence driven security services. </div><div><b>Our purpose</b> is to enable our customers to defend against the evolving threat landscape across on-premises, private cloud, public cloud and multi-cloud workloads.</div><div><b>Our goal</b> is to go beyond traditional security controls to deliver cloud-native, DevOps-centric and fully integrated 24x7x365 cyber defence capabilities that deliver a <b>proactive</b>, <b>threat-informed</b>, <b>risk-based</b>, <b>intelligence-driven</b> approach to detecting and responding to threats.</div><div><b>Our mission</b> is to help our customers:</div><div>·<span>       </span>Defend against new and emerging risks that impact their business.</div><div>·<span>       </span>Reduce their attack surface across private cloud, hybrid cloud, public cloud, and multi-cloud environments.</div><div>·<span>       </span>Reduce their exposure to risks that impact their identity and brand.</div><div>·<span>       </span>Develop operational resilience.</div><div>·<span>       </span>Maintain compliance with legal, regulatory and compliance obligations.</div><div><b> </b></div><div><br /></div><h3>What we’re looking for</h3><ul><li>To support our continued success and deliver a Fanatical Experience™ to our customers, Rackspace Cyber Defence is looking for an Indian based Security Engineer, with a specialism in Endpoint Security to support Rackspace’s strategic customers. </li><li>This role is particularly well-suited to a self-starting, experienced and motivated Sr. Security Engineer, who has a proven record of accomplishment in the design, delivery, management, operation and continuous improvement of enterprise-level Endpoint Security platforms or delivering Managed Endpoint Detection &amp; Response (EDR) services to customers. </li><li>The primary focus will be on the design, implementation, management, operation and continuous improvement of cloud-native Endpoint Detection &amp; Response (EDR) platforms such as Crowdstrike Falcon or Microsoft Defender for Endpoint; used by the Rackspace Cyber Defence Center to deliver managed security services to our customers.</li><li>You will also be required to liaise closely with the customer’s key stakeholders, which may include incident response and disaster recovery teams as well as information security. </li></ul><h3>Skills &amp; Experience</h3><ul><li>Should have <b>8+ years experience</b> in Security Engineering.</li><li>Experience working in either large, enterprise environments or managed security services environments with a focus on Endpoint Detection &amp; Response.</li><li>Experience of working with cloud native Endpoint Security and Endpoint Detection &amp; Response (EDR) tools such as <b>Crowdstrike, Microsoft Defender for Endpoint and/or Microsoft Defender for Cloud.</b></li><li>Experience of working in two (or more) of the following additional security domains:</li><li>SIEM platforms such as Microsoft Sentinel (preferred), Google Chronicle, Splunk, QRadar, LogRhythm, Securonix etc.</li><li>AWS (Amazon Web Services) Security Hub including AWS Guard Duty, AWS Macie, AWS Config and AWS CloudTrail .</li><li>Experience of analysing malware and email headers, and has skills in network security, intrusion detection and prevention systems; operating systems; risk identification and analysis; threat identification and analysis and log analysis. </li><li> Experience of security controls, such as network access controls; identity, authentication, and access management controls (IAAM); and intrusion detection and prevention controls. </li><li>Knowledge of security standards (good practice) such as NIST, ISO27001, CIS (Center for Internet Security), OWASP and Cloud Controls Matrix (CCM) etc.</li><li>Knowledge of scripting and coding with languages such as Terraform, python, javascript, golang, bash and/or powershell.</li><li><b>Knowledge of Malware reverse engineering, threat detection and threat hunting. </b></li><li>Computer science, engineering, or information technology related degree (although not a strict requirement)  </li><li>Holds one, or more, of the following certificates (or equivalent): - </li><li>Microsoft Certified: Azure Security Engineer Associate (AZ500) </li><li>Microsoft Certified: Security Operations Analyst Associate (SC-200) </li><li>Systems Security Certified Practitioner (SSCP) </li><li>Certified Cloud Security Professional (CCSP) </li><li>GIAC Certified Incident Handler (GCIH) </li><li>GIAC Security Operations Certified (GSOC) </li><li>CrowdStrike admin Certified </li><li>A highly self-motivated and proactive individual who wants to learn and grow and has an attention to detail.</li><li>A great analyser, trouble-shooter and problem solver who understands security operations, programming languages and security architecture.</li><li>Highly organised and detail oriented. Ability to prioritise, multitask and work under pressure.</li><li>An individual who shows a willingness to go above and beyond in delighting the customer.</li><li>A good communicator who can explain security concepts to both technical and non-technical audiences.</li></ul><h3>Key Accountabilities</h3><ul><li>Ensure the Customer’s operational and production environment remains healthy and secure at all the times.</li><li>Assist with customer onboarding – customer/device onboarding, policy      configuration, platform configuration and service transition to security      operations team(s).</li><li>Advance platform administration.</li><li>Critical platform incident handling &amp; closure.</li><li>As an SME, act as an L3 escalation and point of contact for SecOps      Analysts during an incident response process</li><li>As an SME, act as a champion and centre of enablement by delivering      training, coaching and thought leadership across Endpoint Security and      Endpoint Detection &amp; Response.</li><li>Develop and document runbooks, playbooks and knowledgebase articles      that drive best practice across teams.</li><li>Drive continuous improvement of Rackspace Managed EDR services      through custom development, automation and integration; in collaboration      with SecOps Engineering and other Security Engineering team(s)</li><li>Maintain close working relationships with relevant teams and      individual key stakeholders, such as incident response and disaster      recovery teams as well as information security etc.</li><li>Co-ordinate with vendor for issue resolution.</li><li>Required to work flexible timings.</li></ul>