Email Security Engineer-Sr Associate

Sutherland; Hyderabad; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Sutherland in Hyderabad is seeking an Email Security Engineer to support operations, detect abuse, and maintain a secure email ecosystem. You will monitor traffic, investigate anomalies, and implement SOP-driven mitigations in a 24x7 environment.

The role requires 3+ years in email operations or SOC, hands-on Splunk experience, and knowledge of SPF/DKIM/DMARC. You will collaborate across teams to resolve delivery issues and uphold SLAs.

Qualifications

• Minimum 3 years in email operations, Trust & Safety, SOC or related domain.
• Hands-on Splunk experience for log analysis and anomaly detection.
• Knowledge of SPF, DKIM, DMARC and email delivery infrastructure.

Responsibilities

• Monitor inbound/outbound email traffic to identify spam, phishing, spoofing, and abuse patterns.
• Analyze logs with Splunk to detect anomalies, suspicious activities, and threats.
• Execute mitigation actions: block, quarantine, escalate suspicious emails per SOPs.
• Validate email authentication protocols SPF, DKIM, DMARC and fix configuration discrepancies.
• Support incident response by documenting findings and maintaining audit trails.
• Ensure SLAs and security standards are met and operations remain compliant.
• Collaborate with internal teams and vendors to resolve email delivery issues and track trends.
• Work in a 24x7 environment with rotating shifts while maintaining quality.

Skills

Email Security

SOC

Trust & Safety

Analytical skills

Communication

Tools

Splunk

Job description

Looking for immediate joiners

Location: Hyderabad

Mode: WFO

Shift:24*7

Skills: Email Security Engineer| SOC| Email Security, Trust & Safety

Role Summary

Support email operations, spam and abuse detection, and Trust & Safety workflows to maintain a secure, reliable, and high-quality email ecosystem. Monitor email traffic, investigate suspicious activities, analyze logs, and implement mitigation measures in accordance with established Standard Operating Procedures (SOPs).

Key Responsibilities

Monitor and investigate inbound and outbound email traffic to identify spam, phishing, spoofing, and other abuse patterns.

Perform log analysis using Splunk to detect anomalies, suspicious activities, and emerging security threats.

Execute mitigation actions, including blocking, quarantining, and escalating suspicious emails or activities, in accordance with defined SOPs.

Validate email authentication protocols, including SPF, DKIM, and DMARC, and identify authentication failures or configuration discrepancies.

Support incident response activities by documenting investigation findings, maintaining audit trails, and escalating critical risks to the appropriate teams.

Ensure compliance with Service Level Agreements (SLAs), quality benchmarks, operational procedures, and applicable security standards.

Collaborate with internal teams and external vendors to resolve email delivery issues, investigate abuse cases, and track emerging trends.

Work in a 24x7 operational environment, including rotational shifts, while maintaining productivity, accuracy, and service quality.

Required Skills and Qualifications

Minimum 3 years of experience in email operations, Trust & Safety, Security Operations Center (SOC), or a related domain.

Working knowledge of SMTP, SPF, DKIM, DMARC, and email delivery infrastructure.

Hands-on experience with Splunk for log analysis, monitoring, and anomaly detection.

Understanding of spam detection, phishing investigation, email spoofing, and abuse prevention.

Strong analytical, investigative, troubleshooting, and problem-solving skills.

Ability to follow SOPs, meet SLAs, maintain accurate documentation, and handle escalations effectively.

Good written and verbal communication skills.

Willingness to work in rotational shifts in a 24x7 operational environment.