SOC Lead, Professional Services Delivery Engineer IV

Job not on LinkedIn

🔥 2 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Rackspace Technology

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1998

💼 Consulting

📦 Logistics

🤖 Artificial Intelligence

Consulting • Logistics • Artificial Intelligence

Rackspace Technology is a global managed cloud services provider that designs, builds, migrates and operates multicloud, hybrid and private cloud environments for enterprises. It offers consulting, professional and managed services across cloud infrastructure, application modernization, data platforms, AI/ML (Foundry of AI/FAIR), and cybersecurity, along with managed hosting, colocation and platform integrations with major hyperscalers. Rackspace serves regulated and mission-critical industries with a focus on security, compliance, cost optimization and operational reliability.

📋 Description

• Lead SOC operations in an MSSP environment using Microsoft Sentinel • Manage incident detection, investigation, response, and escalation • Conduct proactive threat hunting and detection engineering • Administer and optimize Microsoft Sentinel and Elastic Security SIEM platforms • Design and manage Elastic Cloud Serverless SIEM deployments and integrations • Develop security use cases, dashboards, alerts, and automation workflows • Maintain SOC documentation, playbooks, SOPs, and reports • Support cloud security monitoring across Azure, AWS, and GCP • Drive AI-enabled security initiatives and operational improvements • Support security audits, compliance, and governance activities • Lead and mentor SOC analysts and engineers • Manage customer engagements, service delivery, and SLA compliance • Handle and close P1 critical incidents • Perform deep investigation and analysis of critical security incidents • Produce post-breach forensic incident analysis reports • Develop custom dashboards, reporting templates, and customer-specific use cases • Map threats to the MITRE ATT&CK framework • Implement automation and orchestration workflows to improve SOC efficiency • Ensure compliance with ISO 27001, SOC 2, PCI-DSS, NIST, CIS Controls, and other regulatory requirements

🎯 Requirements

• Experience leading a team of Security Operations analysts and engineers • Experience working in an MSSP in a multi-customer environment • Experience working in large-scale public cloud environments • Experience with Azure Security Centre and Microsoft Sentinel • Experience with Qualys and Microsoft Defender for vulnerability management • Experience with CrowdStrike and Microsoft Defender for Endpoint management • Experience with GCP Security Command Center and Chronicle • Experience with AWS Security Hub and AWS GuardDuty • Experience with Microsoft Defender XDR suite • Self-motivated and proactive, with attention to detail • Willingness to learn, grow, and go above and beyond for customers • Ability to explain security concepts to technical and nontechnical audiences • Preferred: Microsoft Certified Cybersecurity Architect Expert (SC-100) • Preferred: Microsoft Certified Security Operations Analyst (SC-200) • Preferred: AZ-500 Azure Security Engineer certification

🏖️ Benefits

• Equal employment opportunity • Disability or special-needs accommodation • Opportunity to collaborate with talented coworkers and make a lasting impact in the IT field • Career development and learning opportunities implied by 'learn and grow'