Email Security Lead

Tekskills; Mumbai; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Tekskills in Mumbai seeks an expert security professional specializing in email perimeter security and Mimecast operations to oversee incident response and regulatory hygiene.

Key duties include managing Mimecast, configuring DKIM/DMARC/SPF, and leading phishing simulations with cross-team collaboration for containment and recovery.

Qualifications

• 8+ years in email and perimeter security
• 4+ years leading Mimecast security operations
• Strong knowledge of MIME filtering, encryption, DKIM/DMARC/SPF
• Experience with mail routing, M365/Exchange Online

Responsibilities

• Manage and improve Mimecast implementation to prevent phishing, spoofing, and malware
• Establish advanced filtering, impersonation protection, and sandboxing policies
• Configure DKIM/DMARC/SPF and align routing with compliance/audit needs
• Monitor threats, perform RCA on false positives/negatives, lead remediation
• Integrate email security events into SIEM for correlation with identity/endpoint telemetry
• Develop weekly threat-trend reports and support governance/compliance submissions
• Provide guidance on BEC protection and mailbox behavior analytics
• Lead phishing simulations and user-awareness metrics for posture improvement
• Coordinate with IT and IR teams for containment and recovery of email-borne incidents
• Define baselines, tune policies, and manage SOC escalations

Skills

Email security

Mimecast

DKIM/DMARC/SPF

Sandboxing

Impersonation protection

M365

Exchange Online

ISO 27001

RBI/SEBI compliance

Education

Relevant security certifications

Job description

Job Summary

The position demands expert-level command over advanced email security controls such as sandboxing, DMARC, threat intelligence integration, and user awareness. The individual is expected to drive continuous improvements, incident response handling, and regulatory email security hygiene.

Key Responsibilities

• Manage and continuously improve Mimecast Email Security implementation to prevent phishing, spoofing, and malware threats targeting users.
• Establish advanced filtering, impersonation protection, and attachment sandboxing policies per risk-based user segmentation.
• Ensure email routing, journaling, and DKIM/DMARC/SPF configurations are aligned with compliance and audit requirements.
• Monitor and resolve advanced email threats, perform RCA on false negatives/positives, and lead remediation for targeted phishing attacks.
• Integrate email security events into SIEM for correlation with identity and endpoint telemetry for improved incident detection.
• Develop reporting templates for weekly threat trends and support governance teams with compliance submissions.
• Provide guidance on BEC protection, email content control, and mailbox behavior analytics.
• Lead simulation testing, phishing campaign exercises, and user awareness metrics for ongoing posture improvements.
• Collaborate with IT and IR teams to drive end-to-end containment and recovery of email-borne incidents.
• Define operational baselines, tune policies, and manage escalations from SOC analysts and internal stakeholders.

Key Skills & Certifications

• 8+ years in email and perimeter security; 4+ years leading Mimecast security operations.
• Advanced knowledge of MIME filtering, encryption, DKIM/DMARC/SPF, sandboxing, and impersonation protection.
• Mimecast Certified Specialist or equivalent certifications preferred.
• Exposure to ISO 27001, RBI/SEBI compliance reporting.
• Strong understanding of mail routing, M365, Exchange Online integration.