Security Engineer III (EDR) - IN

Key Accountabilities · Ensure the Customer’s operational and production environment remains healthy and secure at all the times.

• Assist with customer onboarding – customer/device onboarding, policy configuration, platform configuration and service transition to security operations team(s).
• Advance platform administration.
• Critical platform incident handling & closure.
• As an SME, act as an L3 escalation and point of contact for SecOps Analysts during an incident response process
• As an SME, act as a champion and centre of enablement by delivering training, coaching and thought leadership across Endpoint Security and Endpoint Detection & Response.
• Develop and document runbooks, playbooks and knowledgebase articles that drive best practice across teams.
• Drive continuous improvement of Rackspace Managed EDR services through custom development, automation and integration; in collaboration with SecOps Engineering and other Security Engineering team(s)
• Maintain close working relationships with relevant teams and individual key stakeholders, such as incident response and disaster recovery teams as well as information security etc.
• Co-ordinate with vendor for issue resolution.

· Required to work flexible timings.

Skills & Experience · Should have 8+ years experience in Security Engineering. · Experience working in either large, enterprise environments or managed security services environments with a focus on Endpoint Detection & Response. · Experience of working with cloud native Endpoint Security and Endpoint Detection & Response (EDR) tools such as Crowdstrike, Microsoft Defender for Endpoint and/or Microsoft Defender for Cloud. · Experience of working in two (or more) of the following additional security domains: o SIEM platforms such as Microsoft Sentinel (preferred), Google Chronicle, Splunk, QRadar, LogRhythm, Securonix etc. o AWS (Amazon Web Services) Security Hub including AWS Guard Duty, AWS Macie, AWS Config and AWS CloudTrail .

…