{"id":3512592,"url":"https://alion.io/job/rackspace-technology-soc-manager-in","title":"SOC Manager - IN","company":{"id":46166,"name":"Rackspace Technology","domain":"rackspace.com","url":"https://alion.io/company/rackspace","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":8,"ghost_share":0.125,"stale_share":0.125,"repost_share":0.125,"time_to_fill_p50_days":30,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":58000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cloudflare","optional":false},{"name":"Cloudflare WAF","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Prowler","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SIEM","optional":false},{"name":"ITIL","optional":true}],"status":"live","first_seen_at":"2026-10-30T08:40:50Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-04T01:20:51Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About Rackspace Cyber Defence\nRackspace Cyber Defence is our next generation cyber defence and security operations capability that builds on 20+ years of securing customer environments to deliver proactive, risk-based, threat-informed and intelligence driven security services.\nOur purpose is to enable our customers to defend against the evolving threat landscape across on-premises, private cloud, public cloud and multi-cloud workloads.\nOur goal is to go beyond traditional security controls to deliver cloud-native, DevOps-centric and fully integrated 24x7x365 cyber defence capabilities that deliver a proactive, threat-informed, risk-based, intelligence-driven approach to detecting and responding to threats.\nOur mission is to help our customers:\nProactively detect and respond to cyber-attacks - 24x7x365.\nDefend against new and emerging risks that impact their business.\nReduce their attack surface across private cloud, hybrid cloud, public cloud, and multi-cloud environments.\nReduce their exposure to risks that impact their identity and brand.\nDevelop operational resilience.\nMaintain compliance with legal, regulatory and compliance obligations.\nWhat we’re looking for\nTo support our continued success and deliver a Fanatical Experience™ to our customers, Rackspace Technology is seeking an experienced, technically proficient and customer-focused Security Operations Manager to lead the delivery of its 24×7 Managed Security Services.\nThe successful candidate will lead a multidisciplinary team of security analysts and engineers responsible for threat detection, incident investigation, incident response, vulnerability management and security operations across customer environments.\nThis is a hands-on technical leadership role, requiring strong incident investigation capabilities, excellent customer engagement skills and proven experience managing security operations in an MSSP or enterprise SOC environment.\nThe Security Manager will be responsible for maintaining operational excellence, developing technical capabilities, mentoring engineers and driving continuous improvements across Rackspace's Cyber Defense portfolio.\nKey Accountabilities\n1. SOC Leadership & Team Management\nLead, manage and mentor a team of SOC analysts, security engineers and technical specialists across L1/L2/L3 functions.\nOversee 24×7 security operations, shift coverage, workload distribution, incident escalation and operational readiness.\nProvide technical direction and guidance during complex investigations and security incidents.\nConduct technical reviews, knowledge-sharing sessions, coaching and skills development.\nDrive analyst productivity, operational quality and team performance.\nMaintain effective collaboration across security service towers.\n2. Security Incident Investigation & Response\nLead technical investigations into critical and high-severity security incidents, including malware, ransomware, compromised identities, unauthorized access, suspicious network activity and cloud security threats.\nAct as the security incident lead for P1/P2 incidents, coordinating investigation, containment, remediation guidance and security recovery validation.\nPerform or oversee advanced analysis of endpoint telemetry, security logs, network events, indicators of compromise and attacker techniques.\nGuide analysts in threat hunting, incident correlation, root cause analysis and forensic evidence preservation.\nCoordinate with infrastructure, network, cloud, IAM, application and customer security teams to facilitate incident resolution.\nEnsure timely customer communication, incident updates, escalations and post-incident reporting.\nMaintain and improve incident response playbooks and investigation procedures.\n3. Managed Security Services & Technology Ownership\nOversee security operations across Rackspace's RCDC portfolio, including:\nXDR / SIEM: Microsoft Sentinel, Elastic Security and associated detection, investigation, correlation and response workflows.\nEDR: CrowdStrike Falcon and Microsoft Defender for Endpoint, including threat investigation, containment, policy tuning and agent health.\nVMDR: Qualys vulnerability management, assessment coverage, vulnerability prioritization, reporting and remediation coordination.\nEdge Security: Cloudflare WAF, DDoS protection and associated security monitoring and response.\nManaged Network Security: Palo Alto Networks, Fortinet and native cloud security controls, including security incident coordination and policy management.\nMDRM / External Threat Monitoring: CloudSEK and related external exposure and threat intelligence capabilities.\nCloud Security: CSPM/CNAPP technologies such as Prowler and Upwind, as applicable to the evolving service portfolio.\nThe role requires strong working knowledge of core SOC technologies and the ability to lead specialists across the broader portfolio. Deep hands-on expertise in every individual product is not expected.\n4. Customer Engagement & Service Delivery\nServe as a senior technical point of contact for customer CISOs, security leaders and technical stakeholders.\nLead technical incident discussions, operational reviews, security workshops and customer escalations.\nExplain security incidents, risks, investigation findings and remediation recommendations to technical and non-technical audiences.\nEnsure delivery against agreed SLAs, KPIs, customer commitments and security service objectives.\nOversee customer onboarding, monitoring coverage, policy configuration and operational handover.\nIdentify recurring customer issues and recommend improvements to security controls, detections and operational processes.\nBuild trusted customer relationships through proactive communication and technical credibility.\n5. Detection Engineering, Threat Intelligence & Automation\nOversee detection rule development, tuning, alert correlation and false-positive reduction.\nPromote proactive threat hunting using MITRE ATT&CK, threat intelligence and adversary TTPs.\nDevelop and improve security investigation and response runbooks.\nIdentify opportunities for SOAR automation, AI-assisted investigation and pre-approved response actions.\nImprove SOC effectiveness through measurable reductions in alert noise, investigation effort and response delays.\nEnsure security automation follows appropriate authorization, testing, logging and change-control procedures.\n6. Vulnerability & Exposure Management\nOversee vulnerability assessment operations, scanning coverage and agent health monitoring.\nEnsure critical vulnerabilities are appropriately prioritized, communicated and tracked.\nCoordinate remediation activities with infrastructure, cloud, application and customer teams.\nMonitor vulnerability aging, overdue findings, risk exceptions and remediation validation.\nSupport customers in understanding and reducing security exposure.\n7. Governance, Reporting & Continuous Improvement\nMaintain SOC operational standards, investigation quality, documentation and service delivery controls.\nTrack operational KPIs such as incident response compliance, investigation quality, monitoring coverage, customer escalations and service improvement.\nLead security incident reviews, root cause analysis and corrective action planning.\nMaintain operational runbooks, escalation procedures and knowledge documentation.\nSupport service enhancements, technology integrations and operational readiness for new security offerings.\nSkills & Experience\n10-15 years of cybersecurity experience, including approximately 4-6 years in SOC leadership, incident response or security operations management.\nProven experience managing a 24×7 SOC or MSSP security operations environment.\nStrong hands-on experience in security incident investigation, threat detection, incident response and log analysis.\nPractical expertise in at least one major SIEM platform, preferably Microsoft Sentinel or Elastic Security.\nStrong experience with enterprise EDR technologies such as CrowdStrike Falcon or Microsoft Defender for Endpoint.\nWorking knowledge of vulnerability management platforms, preferably Qualys.\nUnderstanding of cloud security across Azure, AWS and GCP.\nKnowledge of network security, firewalls, WAF, identity security and endpoint protection.\nExperience with MITRE ATT&CK, NIST incident response guidance and security operations best practices.\nStrong analytical, troubleshooting and problem-solving capabilities.\nExcellent customer communication, stakeholder management and presentation skills.\nExperience handling major security incidents and coordinating multidisciplinary technical teams.\nDemonstrated ability to mentor engineers and develop high-performing technical teams.\nPreferred Qualifications\nExperience working in an MSSP or managed security services organization supporting multiple enterprise customers.\nExposure to Cloudflare, Palo Alto Networks, Fortinet, CloudSEK, CSPM or CNAPP technologies.\nExperience with SOAR platforms, security automation, scripting and AI-assisted SOC operations.\nExperience supporting customer technical workshops, solution evaluations and new service onboarding.\nFamiliarity with ITIL incident, problem and change management processes.\nRelevant certifications such as CISSP, CISM, GCIH, GCIA, GSOC, SC-200, or equivalent practical expertise.\nBachelor's degree in Computer Science, Information Security, Engineering or a related discipline, or equivalent professional experience.\nSoft skills\nStrong technical leadership with a willingness to engage directly in complex security investigations.\nCustomer-focused, accountable and decisive during high-pressure situations.\nCapable of balancing operational management with hands-on technical oversight.\nEffective communicator with senior customer stakeholders and internal technical teams.\nCollaborative leader who develops talent and encourages continuous learning. Proactive, adaptable and committed to improving security operations.\n\nAbout Rackspace Technology\nRackspace Technology is the trusted operator of the full enterprise AI stack, from governed private cloud to AI inference and agents in production. From edge to core to cloud, we operate the infrastructure, data layer, and software integration to deliver business outcomes with the predictable cost, reliability, security, and compliance that regulated and mission-critical environments demand. We support customers in more than 120 countries with AI capabilities spanning private cloud, public cloud, applications, data and cyber resilience.\nMore on Rackspace Technology\nThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.","description_format":"text","description_chars":11383,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Space & Aerospace","Managed IT Services (MSP)","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-30T08:40:50Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":30,"reasons":["conf:7","velocity","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/rackspace-technology-soc-manager-in","json_url":"https://alion.io/job/rackspace-technology-soc-manager-in.json","meta":{"generated_at":"2026-11-04T04:54:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7604,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46166},"rest":"https://alion.io/mcp/rest/get_company?id=46166"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frackspace-technology-soc-manager-in"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frackspace-technology-soc-manager-in"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frackspace-technology-soc-manager-in"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rackspace-technology-soc-manager-in\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frackspace-technology-soc-manager-in"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3512592}},{"tool":"search_jobs","arguments":{"company":"rackspace.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3512592},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}