Senior Security Support Engineer

About the Job:
Rackspace Technology is a leading provider of expertise and managed services across all the major public and private cloud technologies. We’ve evolved Fanatical Support to encompass the entire customer journey — providing Fanatical Experience™ from first consultation to daily operations. Our passionate experts combine the power of proactive, always-on service and expertise with best-in-class tools and automation to deliver technology when and how our customers need it.

We are looking for a motivated and technically skilled Security Support Engineer to support the organization’s security posture across hybrid infrastructure environments. The ideal candidate will have hands-on experience with Qualys, CyberArk PAM, Trellix Endpoint Security, and Key Management Services (KMS). This role focuses on ensuring security compliance through continuous monitoring, access control enforcement, endpoint protection, and close collaboration with infrastructure teams to drive secure operations across the IT environment.

Responsibilities:

• Support and maintain the Qualys platform for vulnerability scanning, remediation tracking, and compliance reporting.
• Operate and administer CyberArk Privileged Access Management (PAM) for secure credential storage, session recording, and least-privilege enforcement.
• Deploy, monitor, and manage Trellix (formerly McAfee) Endpoint Protection (ENS/ePO) across servers and user endpoints.
• Support the configuration and operation of Key Management Services (KMS), ensuring proper encryption key handling and integration with infrastructure components.
• Work closely with infrastructure, networking, cloud, and platform teams to ensure security policies are consistently applied across systems.
• Monitor compliance and assist in the remediation of non-compliant systems, working across teams to close vulnerabilities and improve system hardening.
• Support access management tasks and integrations related to Active Directory, DNS, Windows CA, and system certificate lifecycle management.
• Contribute to the development and maintenance of operational documentation, security runbooks, and standard operating procedures.
• Participate in incident response activities, including investigation, triage, and resolution of endpoint or access-related security events.
• Assist with internal and external security audits by providing evidence, generating reports, and ensuring audit readiness.

Requirements:

• Bachelor’s degree in information security, Computer Science, or a related field.
• 3–5 years of experience in security support or IT infrastructure with a focus on operational security tools and practices.
• Hands-on experience with:
  • Qualys for vulnerability management
  • CyberArk PAM for privileged access
  • Trellix/McAfee ENS/ePO for endpoint protection
  • KMS (Key Management Services) for encryption and key lifecycle
• Good understanding of IT security principles, compliance frameworks (ISO 27001, NIST), and hardening best practices.
• Experience working with infrastructure teams (network, storage, virtualization, cloud) to ensure security control implementation and compliance.
• Familiarity with identity and access control systems such as Active Directory, DNS, and Windows Certificate Services.
• Strong analytical, communication, and documentation skills.
• Familiarity with ITIL practices (especially incident and change management).

Additional Skills (Good To Have):

• Security certifications such as Security+, CEH, CyberArk Certified Trustee/Defender, or Qualys Certified Specialist.
• Experience with log analysis and SIEM tools (e.g., Elastic Stack, Aria Operations for Logs).
• Exposure to infrastructure security in VMware, Kubernetes, or OpenStack environments.
• Familiarity with scripting or automation for reporting and remediation (PowerShell, Python, or Bash).
• ITIL Foundation certification.