Security Engineer III – IN

WebHosting; Gurugram District; On-site; INR 1,500,000 - 2,700,000; Full time

Job summary

Rackspace Technology is hiring for a SIEM Engineer to onboard data feeds into Microsoft Sentinel and Elastic Security, and to integrate on‑premises and cloud resources. The role emphasizes developing dashboards, playbooks, and devops‑driven platform administration to strengthen 24x7 security operations.

The ideal candidate brings GSOC or CISSP certification, strong SIEM experience, and the ability to work across on‑prem and multi‑cloud environments, ensuring reliable threat detection and

Qualifications

• Experience configuring data feeds into SIEM platforms (MS Sentinel, Elastic Security).
• Onboard and integrate on-premises and cloud resources into SIEM solutions.
• Develop custom dashboards and reporting templates.

Responsibilities

• Assist with customer onboarding by configuring and integrating data feeds into SIEM platforms with primary focus on Microsoft Sentinel and Elastic Security.
• Ensure the customer’s operational and production environment remains healthy and secure at all times.
• Onboard and integrate on-premises and cloud resources into Elastic SIEM, MS Sentinel, ensuring reliable security log ingestion, parsing, and monitoring.
• Develop custom dashboards and reporting templates.
• Develop complex to customer specific use cases.
• Advance platform administration with a DevOps-centric approach.
• Solution recommendation for issues.
• Coordinate with vendor for issue resolution.
• Maintain relationships with incident response and disaster recovery teams.

Skills

SIEM platforms

Cloud security

DevOps mindset

Education

GIAC Security Operations Certified (GSOC)

Certified Information Security Systems Professional (CISSP)

Tools

Microsoft Sentinel

Elastic Security

Splunk

IBM QRadar

Job description

Job Description

Rackspace Security (Public Cloud)

About Rackspace Cyber Defence

Rackspace Cyber Defence is our next generation cyber defence and security operations capability that builds on 20+ years of securing customer environments to deliver proactive, risk-based, threat-informed and intelligence driven security services.

Our purpose

is to enable our customers to defend against the evolving threat landscape across on-premises, private cloud, public cloud and multi-cloud workloads.

Our goal

is to go beyond traditional security controls to deliver cloud-native, DevOps-centric and fully integrated 24x7x365 cyber defence capabilities that deliver aproactive,threat-informed,risk-based,intelligence-drivenapproach to detecting and responding to threats.

Our mission

is to help our customers:

• Proactively detect and respond to cyber-attacks – 24x7x365.
• Defend against new and emerging risks that impact their business.
• Reduce their attack surface across private cloud, hybrid cloud, public cloud, and multi-cloud environments.
• Reduce their exposure to risks that impact their identity and brand.
• Develop operational resilience.
• Maintain compliance with legal, regulatory and compliance obligations.

Key Accountabilities

• Assist with customer onboarding by configuring and integrating data feeds into SIEM platforms with primary focus on Microsoft Sentinel and Elastic Security. Good to have experience in Splunk, IBM QRadar, and Google SecOps (Chronicle)
• Ensure the Customer’s operational and production environment remains healthy and secure at all the times.
• Onboard and integrate on-premises and cloud resources into Elastic SIEM, MS Sentinel, ensuring reliable security log ingestion, parsing, and monitoring.
• Develop custom dashboards and reporting templates.
• Develop complex to customer specific use cases.
• Advance platform administration, ideally through a DevOps-centric approach.
• Solution recommendation for issues.
• Co-ordinate with vendor for issue resolution.
• Basic and Intermediate Playbook and workflow enhancement.
• Maintain close working relationships with relevant teams and individual key stakeholders, such as incident response and disaster recovery teams as well as information security etc.
• Develop the custom parsers for the Incident and alert enrichment.
• Problem specific playbook and workflow creation and enhancements

· Required to work flexible timings.

Desired Certifications:

Holds one, or more, of the following certificates (or equivalent): –

o GIAC Security Operations Certified (GSOC)

o Certified Information Security Systems Professional (CISSP)

Soft Skills

Willingness to work flexible schedules and support critical customer situations

About Rackspace Technology

Rackspace Technology is the trusted operator of the full enterprise AI stack, from governed private cloud to AI inference and agents in production. From edge to core to cloud, we operate the infrastructure, data layer, and software integration to deliver business outcomes with the predictable cost, reliability, security, and compliance that regulated and mission-critical environments demand. We support customers in more than 120 countries with AI capabilities spanning private cloud, public cloud, applications, data and cyber resilience.

More on Rackspace Technology

Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.