Email Security Professional

Tekskills; Mumbai; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Tekskills seeks an L3 Email Security Lead with Mimecast expertise to drive the organization's email security program from Mumbai. You will implement and refine policies to thwart phishing, impersonation, and malware, while aligning DKIM/DMARC/SPF with audits and compliance.

You will monitor threats, perform root-cause analyses, and coordinate remediation with IT and IR teams, delivering weekly threat reports and governance support.

Responsibilities

• Manage and continuously improve Mimecast Email Security implementation to prevent phishing, spoofing, and malware threats targeting users.
• Establish advanced filtering, impersonation protection, and attachment sandboxing policies per risk-based user segmentation.
• Ensure email routing, journaling, and DKIM/DMARC/SPF configurations are aligned with compliance and audit requirements.
• Monitor and resolve advanced email threats, perform RCA on false negatives/positives, and lead remediation for targeted phishing attacks.
• Integrate email security events into SIEM for correlation with identity and endpoint telemetry for improved incident detection.
• Develop reporting templates for weekly threat trends and support governance teams with compliance submissions.
• Provide guidance on BEC protection, email content control, and mailbox behavior analytics.
• Lead simulation testing, phishing campaign exercises, and user awareness metrics for ongoing posture improvements.
• Collaborate with IT and IR teams to drive end-to-end containment and recovery of email-borne incidents.
• Define operational baselines, tune policies, and manage escalations from SOC analysts and internal stakeholders.

Job description

Job Title: L3 Email Security Lead (Mimecast is mandatory)

Responsibilities:

• Manage and continuously improve Mimecast Email Security implementation to prevent phishing, spoofing, and malware threats targeting users.
• Establish advanced filtering, impersonation protection, and attachment sandboxing policies per risk-based user segmentation.
• Ensure email routing, journaling, and DKIM/DMARC/SPF configurations are aligned with compliance and audit requirements.
• Monitor and resolve advanced email threats, perform RCA on false negatives/positives, and lead remediation for targeted phishing attacks.
• Integrate email security events into SIEM for correlation with identity and endpoint telemetry for improved incident detection.
• Develop reporting templates for weekly threat trends and support governance teams with compliance submissions.
• Provide guidance on BEC protection, email content control, and mailbox behavior analytics.
• Lead simulation testing, phishing campaign exercises, and user awareness metrics for ongoing posture improvements.
• Collaborate with IT and IR teams to drive end-to-end containment and recovery of email-borne incidents.
• Define operational baselines, tune policies, and manage escalations from SOC analysts and internal stakeholders.