Security Engineer - Email Security
Core
Designing and implementing enterprise-grade email security guardrails to identify and prevent email-based threats in regulated fintech/healthcare environments.
Role type
Senior IC security engineer (email security)
Builds
Secure enterprise email environments (Microsoft 365/Exchange Online)
Domain
Fintech / Healthcare / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
email security guardrails design, phishing and BEC prevention, email authentication (SPF/DKIM/DMARC), data loss prevention, policy enforcement, mail-flow troubleshooting, incident response, Microsoft Exchange administration, Microsoft Defender for Office 365, email header analysis, attacker technique analysis
Preferred skills
Microsoft Purview, Microsoft Sentinel, PowerShell for Exchange Online, Entra ID/Azure AD authentication, Conditional Access, MFA
Technologies
Microsoft Purview, Proofpoint, Microsoft Exchange Online, EasyDMARC, Abnormal Security, Microsoft Defender for Office 365, Microsoft Sentinel, Entra ID/Azure AD, PowerShell
Responsibilities
Analyze suspicious messages (headers, routing, URLs, attachments, authentication results); Administer email security controls (Exchange Online, Defender, EasyDMARC, Abnormal); Troubleshoot mail-flow, quarantine, and filtering issues; Review message traces and logs; Configure mail-flow rules, anti-spam/phishing policies, and allow/block lists; Support incident containment and remediation; Analyze email authentication technologies; Identify false positives/negatives and recommend policy improvements; Document investigations and create operational procedures; Collaborate with SOC, IR, IAM, and Infrastructure teams; Analyze security metrics and trends.
Seniority
Senior, hands-on IC
