Manager (Email Security Engineering)

Auxis; Bogotá; Presencial; COP 120.000.000 - 240.000.000; Jornada completa

Descripción de la vacante

Auxis is seeking a Manager for Email Security Engineering to lead a distributed team protecting the firm's messaging environment from phishing, BEC, and data loss. You own the secure email gateway and cloud protections, govern sending-domain authentication, and drive remediation through user reporting and automation.

You will set priorities, manage on-call coverage, and report on catch and false-positive rates to security leadership while coordinating with audit and client assurance.

Formación

• Eight or more years in messaging or security engineering, including at least two years leading engineers as a manager or team lead.
• Strong grasp of phishing and business email compromise tradecraft, and of the metrics that demonstrate control effectiveness.
• Proven delivery of a DMARC enforcement program across a complex estate of sending domains and third-party senders.

Responsabilidades

• Lead the email security engineering team, setting priorities, on-call coverage, and development plans for engineers across multiple locations.
• Own the strategy and roadmap for email protection, including gateway and cloud-native controls, sandboxing, impersonation defense, and post-delivery remediation.
• Drive the authentication program for all sending domains, moving SPF, DKIM, and DMARC to an enforcing posture without disrupting legitimate business mail.
• Partner with security operations and awareness teams on phishing response, user reporting workflows, and simulation results, and close the loop between findings and control changes.
• Report on catch rates, false positive rates, and mail flow health to security leadership, and support audit, privacy, and client assurance requests.

Conocimientos

English level B2+

Leadership experience

Security engineering

Herramientas

Proofpoint

Mimecast

Microsoft Defender for Office 365

Descripción del empleo

Job Summary

The Manager for Email Security Engineering leads the team that protects the firm's messaging environment against phishing, business email compromise, malware delivery, and data loss. The role owns the secure email gateway and cloud email protection stack, the authentication posture of every sending domain, and the effectiveness of user reporting and automated remediation. It balances leadership of a distributed team with accountability for measurable reductions in successful email attacks.

Responsibilities

• Lead the email security engineering team, setting priorities, on-call coverage, and development plans for engineers across multiple locations.
• Own the strategy and roadmap for email protection, including gateway and cloud-native controls, sandboxing, impersonation defense, and post-delivery remediation.
• Drive the authentication program for all sending domains, moving SPF, DKIM, and DMARC to an enforcing posture without disrupting legitimate business mail.
• Partner with security operations and awareness teams on phishing response, user reporting workflows, and simulation results, and close the loop between findings and control changes.
• Report on catch rates, false positive rates, and mail flow health to security leadership, and support audit, privacy, and client assurance requests.

Required Qualifications

Skills and Experience

• English Level B2+
• Eight or more years in messaging or security engineering, including at least two years leading engineers as a manager or team lead.
• Expert knowledge of enterprise email security platforms such as Proofpoint, Mimecast, or Microsoft Defender for Office 365, and of Exchange Online mail flow.
• Proven delivery of a DMARC enforcement program across a complex estate of sending domains and third-party senders.
• Strong grasp of phishing and business email compromise tradecraft, and of the metrics that demonstrate control effectiveness.

Preferred Qualifications

• Certification such as CISSP, GCIA, or a vendor certification on the deployed email security platform.
• Experience with data loss prevention for email, encryption gateways, and automated phishing response playbooks.