SOC Manager - IN

Rackspace US, Inc.; India; Sur place; INR 1 200 000 - 1 800 000; Plein temps

Résumé du poste

Rackspace Technology is seeking a Security Operations Manager to lead 24x7 security services and a multidisciplinary team of analysts and engineers across customer environments.

The role requires hands-on incident investigation capabilities, strong customer engagement skills, and experience managing security operations in MSSP or enterprise SOC settings.

Qualifications

• Experience leading security operations in MSSP or enterprise SOC environments.
• Strong incident investigation and response capabilities with customer focus.
• Ability to coordinate cross-functional teams during P1/P2 incidents.

Responsabilités

• Lead and mentor SOC analysts, engineers and specialists across L1–L3.
• Oversee 24x7 security operations, incident escalation and readiness.
• Coordinate with infrastructure, cloud, IAM and customer security teams.
• Maintain incident playbooks, post-incident reporting and customer comms.
• Drive improvements across the Rackspace Cyber Defense portfolio.

Connaissances

Team leadership

Incident response

Security operations

Customer engagement

Outils

Microsoft Sentinel

Elastic Security

CrowdStrike Falcon

Defender for Endpoint

Qualys

Cloudflare WAF

Palo Alto Networks

Fortinet

Description du poste

About Rackspace Cyber Defence

Rackspace Cyber Defence is our next generation cyber defence and security operations capability that builds on 20+ years of securing customer environments to deliver proactive, risk-based, threat-informed and intelligence driven security services.

Our purpose is to enable our customers to defend against the evolving threat landscape across on-premises, private cloud, public cloud and multi-cloud workloads.

Our goal is to go beyond traditional security controls to deliver cloud-native, DevOps-centric and fully integrated 24x7x365 cyber defence capabilities that deliver a proactive , threat-informed , risk-based , intelligence-driven approach to detecting and responding to threats.

Our mission is to help our customers:

• Proactively detect and respond to cyber-attacks - 24x7x365.
• Defend against new and emerging risks that impact their business.
• Reduce their attack surface across private cloud, hybrid cloud, public cloud, and multi-cloud environments.
• Reduce their exposure to risks that impact their identity and brand.
• Develop operational resilience.
• Maintain compliance with legal, regulatory and compliance obligations.

What we're looking for

To support our continued success and deliver a Fanatical Experience to our customers, Rackspace Technology is seeking an experienced, technically proficient and customer-focused Security Operations Manager to lead the delivery of its 24x7 Managed Security Services.

The successful candidate will lead a multidisciplinary team of security analysts and engineers responsible for threat detection, incident investigation, incident response, vulnerability management and security operations across customer environments.

This is a hands-on technical leadership role, requiring strong incident investigation capabilities, excellent customer engagement skills and proven experience managing security operations in an MSSP or enterprise SOC environment.

The Security Manager will be responsible for maintaining operational excellence, developing technical capabilities, mentoring engineers and driving continuous improvements across Rackspace's Cyber Defense portfolio.

Key Accountabilities

1. SOC Leadership & Team Management

   • Lead, manage and mentor a team of SOC analysts, security engineers and technical specialists across L1/L2/L3 functions.
   • Oversee 24x7 security operations, shift coverage, workload distribution, incident escalation and operational readiness.
   • Provide technical direction and guidance during complex investigations and security incidents.
   • Conduct technical reviews, knowledge-sharing sessions, coaching and skills development.
   • Drive analyst productivity, operational quality and team performance.
   • Maintain effective collaboration across security service towers.

2. Security Incident Investigation & Response

   • Lead technical investigations into critical and high-severity security incidents, including malware, ransomware, compromised identities, unauthorized access, suspicious network activity and cloud security threats.
   • Act as the security incident lead for P1/P2 incidents, coordinating investigation, containment, remediation guidance and security recovery validation.
   • Perform or oversee advanced analysis of endpoint telemetry, security logs, network events, indicators of compromise and attacker techniques.
   • Guide analysts in threat hunting, incident correlation, root cause analysis and forensic evidence preservation.
   • Coordinate with infrastructure, network, cloud, IAM, application and customer security teams to facilitate incident resolution.
   • Ensure timely customer communication, incident updates, escalations and post-incident reporting.
   • Maintain and improve incident response playbooks and investigation procedures.

3. Managed Security Services & Technology Ownership

   • Oversee security operations across Rackspace's RCDC portfolio, including:
   • XDR / SIEM: Microsoft Sentinel, Elastic Security and associated detection, investigation, correlation and response workflows.
   • EDR: CrowdStrike Falcon and Microsoft Defender for Endpoint, including threat investigation, containment, policy tuning and agent health.
   • VMDR: Qualys vulnerability management, assessment coverage, vulnerability prioritization, reporting and remediation coordination.
   • Edge Security: Cloudflare WAF, DDoS protection and associated security monitoring and response.
   • Managed Network Security: Palo Alto Networks, Fortinet and native cloud security controls, including security incident coordination and policy management.
   • MDRM / External Threat Monitoring: CloudSEK and related external exposure and threat intelligence capabilities.
   • Cloud Security: CSPM/CNAPP technologies such as Prowler and Upwind, as applicable to the evolving service portfolio.

   The role requires strong working knowledge of core SOC technologies and the ability to lead specialists across the broader portfolio. Deep hands-on expertise in every individual product is not expected.

4. Customer Engagement & Service Delivery

   Serve as a senior t