Rackspace Technology

Security Analyst

• Lead and perform proactive threat hunting across multiple customers or organizational estates using available data and threat intelligence.
• Create, test, and iterate threat hunting hypotheses to uncover undetected malicious activity.
• Leverage Cyber Threat Intelligence (CTI) feeds and tooling to track threat actor TTPs and deliver contextual insights relevant to the organization.
• Design and implement custom detection rules in SIEM platforms, particularly Microsoft Sentinel.
• Handling Cloud Sek Platform incidents (Dark web detections, Credential Leaks, Compromised Computer.)
• Collaborate with detection engineers, SOC analysts, and other stakeholders to improve detection content and response workflows.
• Contribute to incident response activities by supporting triage, investigation, and root cause analysis of cybersecurity events.
• Support risk and threat modelling initiatives by providing timely threat input and context.
• Deliver timely high-quality reporting (including executive briefings and technical analysis) on emerging threats and threat actor trends.
• Manage and curate threat intelligence watchlists, enrich detections with threat data, and assist SOC teams with relevant contextual insights.
• Support insider threat monitoring and vulnerability risk assessments.
• Participate in detection engineering efforts by identifying opportunities for new or enhanced analytics.
• Communicate threat relevance to technical and non-technical stakeholders clearly and concisely.
• Maintain an active awareness of the evolving cyber threat landscape, particularly as it pertains to your sector.
• Liaise with Corporate Enterprise Security for indicator and threat sharing.
• Drive iterative non-technical process improvement and documentation to minimize process friction to eliminate waste and drive consistency.

Cyber Threat Intelligence Analyst

Engineer

• Architect, engineer, implement, and administer Splunk solutions in highly available, redundant, distributed computing environments.
• Lead design and deployment of new Splunk environments, including clustered, multi-site, and large-scale configurations.
• Perform Splunk forwarder deployment, configuration, and troubleshooting across diverse platforms.
• Integrate, curate, and normalize diverse log sources into Splunk, ensuring CIM compliance and high data fidelity.
• Configure and maintain Splunk dashboards, searches, and alerts to meet PCI DSS logging requirements, and deliver evidentiary reports to auditors to support compliance verification
• Develop advanced content for SIEM correlation, including custom correlation searches, dashboards, and alerts.
• Administer, maintain, and tune Splunk components (Indexers, Search Heads, Forwarders, Cluster Masters, Deployer, Deployment Server, and License Master).
• Proactively monitor platform health using internal logs, KPIs, and custom monitoring solutions to identify and address performance bottlenecks.
• Lead capacity planning, storage forecasting, and continuity of operations for large Splunk deployments.
• Optimize Splunk performance through configuration tuning, search optimization, and data model acceleration strategies.
• Troubleshoot complex ingestion, performance, and search-related issues, identifying root causes and implementing sustainable fixes or workarounds.
• Reproduce customer or internal issues, document findings, and work with Splunk Support or vendor engineers for resolution.
• Create, maintain, and enforce Splunk engineering documentation, including SOPs, design diagrams, architecture runbooks, and KB articles.
• Develop custom scripts and automation tools (e.g., Python, Bash, PowerShell) to improve Splunk administration, onboarding, and operational workflows.
• Utilize Splunk APIs for integration with enterprise tools and automation frameworks.
• Serve as a technical escalation point for Splunk Engineer I/II and Splunk Admin roles.
• Administer, tune, and troubleshoot Splunk Enterprise Security, maintaining data models, correlation searches, and notable events pipeline.
• Configure and manage HEC (HTTP Event Collector) connections and onboard new data sources.
• Manage Splunk RBAC (Role-Based Access Control) including SAML and AD group integrations for search heads and API endpoints.
• Collaborate with security, infrastructure, application, and DevOps teams to ensure Splunk aligns with enterprise monitoring, compliance, and operational goals.
• Design and implement Splunk solutions supporting compliance frameworks (e.g., PCI DSS, HIPAA, SOX), including dashboard/report development and audit evidence.
• Research, evaluate, and implement new Splunk apps, add-ons, and integrations to enhance platform capabilities.
• Mentor junior Splunk engineers and guide cross-functional teams on Splunk best practices, search optimization, and data onboarding.

Splunk Engineer

Data Scientist

• Assist in developing, training, and validating machine learning models for real-world applications (e.g., classification, prediction, and recommendation systems).
• Build and maintain data ingestion pipelines from structured and unstructured sources using Python and SQL-based tools
• Perform data cleaning, normalization, and feature engineering to prepare high-quality datasets for ML training and evaluation.
• Collaborate on ML projects such as outcome prediction systems, image classification models, and intelligent search interfaces.
• Contribute to building interactive applications by integrating ML models into frontend/backend systems (e.g., React, Django, REST APIs).
• Participate in MLOps workflows, including model versioning, basic deployment tasks, and experiment tracking.
• Document data flows, ML experiments, and application logic consistently.
• Attend Agile meetings and collaborate with peers through code reviews and sprint activities.

Data Science Engineer I

Security Engineer

• Monitor, manage, and resolve Jira tickets related to enterprise and reference data issues.
• Conduct initial triage of issues, assess severity/urgency, and assign to the right teams.
• Collaborate with cross-functional teams to resolve problems.
• Provide regular stakeholder communication and updates on issue resolution.
• Document troubleshooting steps and build a knowledge base for recurring problems.
• Work with L3/engineering teams on root cause analysis and long-term fixes.
• Support data integrity, governance, and accuracy across systems.
• Participate in recurring operational review meetings and progress updates.

Cyber Threat Intelligence Analyst

Splunk Engineer

Data Science Engineer I

Senior Director, Security Services – Delivery, Market Strategy and Partnerships