GMS - Senior - Proofpoint

Ernst & Young Advisory Services Sdn Bhd; Bengaluru; On-site; INR 1,500,000 - 2,800,000; Full time

Job summary

EY is seeking a Proofpoint L3 Operations Engineer in Bengaluru to act as the technical SME for Proofpoint environments, handling advanced troubleshooting, platform optimisation, configuration management, security enhancements, and integrations. You will own complex incidents and platform improvements, while mentoring junior engineers and contributing to runbooks and CAB activities.

Experience required includes 6–10 years in cybersecurity or messaging security, with at least 4+ years in

Qualifications

• 6–10 years of Cybersecurity or Messaging Security experience.
• 4+ years of hands-on Proofpoint administration and engineering.
• Experience in enterprise-scale email security environments.

Responsibilities

• Troubleshoot complex email delivery and security incidents, and perform deep-dive analysis of mail flow, DLP events, and encryption issues.
• Design and implement security policies, DLP rules, TAP policies, encryption policies and threat detection tuning.
• Configure SPF, DKIM, DMARC, Secure Email Relay and MX Routing; support tenant expansion and integration initiatives.
• Integrate Proofpoint with Microsoft 365, Exchange Online, SIEM platforms, Splunk, Sentinel; lead root cause analysis and remediation plans.
• Mentor L1/L2 engineers; develop runbooks and knowledge articles; participate in CAB activities.

Skills

Proofpoint Email Protection

Proofpoint TAP

Proofpoint Threat Response

Proofpoint DLP

Proofpoint Encryption

Email Fraud Defence

SMTP Analysis

Exchange Online

MS 365 Security Stack

DNS & MX Routing

API Integrations

PowerShell Scripting

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Role Summary

The Proofpoint L3 Operations Engineer serves as the technical SME for the Proofpoint environment and is responsible for advanced troubleshooting, platform optimisation, configuration management, security enhancements, integrations, and engineering support. The role owns complex incidents, problem management, andplatform improvements.

Key Responsibilities

Advanced Troubleshooting

• Resolve complex email delivery and security incidents.
• Perform deep-dive analysis of:
• Mail flow failures
• DLP events
• Encryption issues
• Analyse SMTP transactions, logs, headers, and threat intelligence data.
• Design and implement:
  • Security policies
  • DLP rules
  • TAP policies
  • Encryption policies
  • Threat detection tuning
• Configure:
  • SPF
  • DKIM
  • DMARC
  • Secure Email Relay
  • MX Routing
• Support tenant expansion and implementation initiatives.

Security Enhancements

• Optimise threat detection and false-positive reduction.
• Evaluate emerging email threats and protection strategies.
• Provide security recommendations to leadership and stakeholders.

Integrations

• Integrate Proofpoint with:
  • Microsoft 365
  • Exchange Online
  • SIEM platforms
  • Splunk
  • Sentinel
  • Threat Intelligence platforms
• Support API-based integrations and automation initiatives.
• Lead root cause analysis activities.
• Own problem records and long-term remediation plans.
• Review and approve platform changes.
• Participate in CAB activities.

Technical Leadership

• Mentor L1 and L2 engineers.
• Develop operational runbooks and knowledge articles.

Required Skills

Proofpoint Expertise

• Proofpoint Email Protection
• Proofpoint TAP
• Proofpoint Threat Response
• Proofpoint DLP
• Proofpoint Encryption
• Email Fraud Defence (Good to Have)

Advanced Technical Skills

• SMTP Protocol Analysis
• Exchange Online
• Microsoft 365 Security Stack
• DNS & MX Routing Design
• API Integrations
• PowerShell Scripting

Security Knowledge

• Phishing Protection
• Malware Analysis
• Threat Hunting
• Email Security Architecture

Monitoring & Analytics

• Splunk
• Microsoft Sentinel
• SIEM Correlation

Experience

• 6-10 years of Cybersecurity or Messaging Security experience.
• 4+ years of hands-on Proofpoint administration and engineering.
• Experience in enterprise-scale email security environments.

Preferred Certifications

• Proofpoint Certified Professional (PCP)
• Proofpoint Certified Guardian
• Microsoft Security Operations Analyst
• Certified Information Systems Security Professional (CISSP)
• ITIL Foundation

Nice-to-Have Skills

• Mimecast
• Exchange Hybrid
• Python/PowerShell Automation
• Security Operations Centre (SOC) experience

EY Managed Services Expectations

• Queue ownership and SLA adherence
• Continuous service improvement mindset
• Excellent stakeholder communication and reporting skills

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.