Email Security Engineer

Tekskills Inc.; Mumbai; On-site; INR 1,200,000 - 1,900,000; Full time

Job summary

Tekskills Inc. in Mumbai seeks a skilled security engineer to manage and continuously improve Mimecast Email Security, protecting users from phishing, spoofing and malware. The role focuses on advanced filtering, impersonation protection, and sandboxing policies.

You will ensure email routing and DKIM/DMARC/SPF alignment with compliance, monitor threats, perform RCA on incidents, integrate events into SIEM, and develop weekly threat trend reports to support governance and incident response.

Responsibilities

• Manage Mimecast Email Security implementation and improvements to prevent phishing, spoofing, and malware.
• Establish advanced filtering, impersonation protection, and attachment sandboxing policies per risk-based user segmentation.
• Ensure email routing, journaling, and DKIM/DMARC/SPF configurations align with compliance and audit requirements.
• Monitor and resolve advanced email threats, perform RCA on false negatives/positives, and lead remediation for targeted phishing attacks.
• Integrate email security events into SIEM for correlation with identity and endpoint telemetry for improved incident detection.
• Develop reporting templates for weekly threat trends and support governance teams with compliance submissions.
• Provide guidance on BEC protection, email content control, and mailbox behavior analytics.
• Lead simulation testing, phishing campaign exercises, and user awareness metrics for ongoing posture improvements.
• Collaborate with IT and IR teams to drive end-to-end containment and recovery of email-borne incidents.
• Define operational baselines, tune policies, and manage escalations from SOC analysts and internal stakeholders.

Job description

Key Responsibilities

• Manage and continuously improve Mimecast Email Security implementation to prevent phishing, spoofing, and malware threats targeting users.
• Establish advanced filtering, impersonation protection, and attachment sandboxing policies per risk-based user segmentation.
• Ensure email routing, journaling, and DKIM/DMARC/SPF configurations are aligned with compliance and audit requirements.
• Monitor and resolve advanced email threats, perform RCA on false negatives/positives, and lead remediation for targeted phishing attacks.
• Integrate email security events into SIEM for correlation with identity and endpoint telemetry for improved incident detection.
• Develop reporting templates for weekly threat trends and support governance teams with compliance submissions.
• Provide guidance on BEC protection, email content control, and mailbox behavior analytics.
• Lead simulation testing, phishing campaign exercises, and user awareness metrics for ongoing posture improvements.
• Collaborate with IT and IR teams to drive end-to-end containment and recovery of email-borne incidents.
• Define operational baselines, tune policies, and manage escalations from SOC analysts and internal stakeholders.