GMS - Senior - Proofpoint

EY; Gurugram District; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

EY seeks an experienced Proofpoint Operations Engineer to act as the technical SME for the Proofpoint environment, handling complex incidents, platform tuning, and integrations within EY's security stack.

The role emphasizes design of security policies, DLP rules, and encryption policies, plus mentoring junior engineers and leading root cause analyses in a 24x7 support context.

Qualifications

• 6-10 years of Cybersecurity or Messaging Security experience.

Responsibilities

• Advanced Troubleshooting: Resolve complex email delivery and security incidents.
• Platform Engineering & Administration: Design and implement security policies, DLP rules, TAP policies, encryption policies, threat detection tuning.
• Security Enhancements: Optimise threat detection and false-positive reduction; evaluate emerging email threats.
• Integrations: Integrate Proofpoint with Microsoft 365, Exchange Online, SIEM platforms, Splunk, Sentinel; support API-based integrations and automation.
• Problem & Change Management: Lead root cause analysis, own problem records, review platform changes; participate in CAB.
• Technical Leadership: Mentor L1/L2 engineers; develop runbooks and knowledge articles; provide escalation support.

Skills

Proofpoint Email Protection

Proofpoint TAP

Proofpoint Threat Response

Proofpoint DLP

Proofpoint Encryption

Email Fraud Defence

SMTP Protocol Analysis

Exchange Online

Microsoft 365 Security Stack

SPF

DKIM

DMARC

Secure Email Gateway Architecture

DNS & MX Routing Design

API Integrations

PowerShell Scripting

Phishing Protection

Malware Analysis

Threat Hunting

Email Security Architecture

Incident Response

Data Loss Prevention

Splunk

Microsoft Sentinel

Defender for Office 365

SIEM Correlation

Tools

Microsoft 365 Security Stack

PowerShell

Job description

Job Description:

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Role Summary

The Proofpoint L3 Operations Engineer serves as the technical SME for the Proofpoint environment and is responsible for advanced troubleshooting, platform optimisation, configuration management, security enhancements, integrations, and engineering support. The role owns complex incidents, problem management, and platform improvements.

Key Responsibilities

Advanced Troubleshooting

• Resolve complex email delivery and security incidents.
• Perform deep-dive analysis of:
• Mail flow failures
• TAP detections
• DLP events
• Email authentication failures
• Encryption issues
• Analyse SMTP transactions, logs, headers, and threat intelligence data.

Platform Engineering & Administration

• Design and implement:
• Security policies
• DLP rules
• TAP policies
• Encryption policies
• Threat detection tuning
• Configure:
• SPF
• DKIM
• DMARC
• Secure Email Relay
• MX Routing
• Support tenant expansion and implementation initiatives.

Security Enhancements

• Optimise threat detection and false-positive reduction.
• Evaluate emerging email threats and protection strategies.
• Provide security recommendations to leadership and stakeholders.

Integrations

• Integrate Proofpoint with:
• Microsoft 365
• Exchange Online
• SIEM platforms
• Splunk
• Sentinel
• Threat Intelligence platforms
• Support API-based integrations and automation initiatives.

Problem & Change Management

• Lead root cause analysis activities.
• Own problem records and long-term remediation plans.
• Review and approve platform changes.
• Participate in CAB activities.

Technical Leadership

• Mentor L1 and L2 engineers.
• Develop operational runbooks and knowledge articles.
• Provide escalation support during major incidents.

Required Skills

Proofpoint Expertise

• Proofpoint Email Protection
• Proofpoint TAP
• Proofpoint Threat Response
• Proofpoint DLP
• Proofpoint Encryption
• Email Fraud Defence (Good to Have)

Advanced Technical Skills

• SMTP Protocol Analysis
• Exchange Online
• Microsoft 365 Security Stack
• Email Authentication Frameworks (SPF, DKIM, DMARC)
• Secure Email Gateway Architecture
• DNS & MX Routing Design
• API Integrations
• PowerShell Scripting

Security Knowledge

• Phishing Protection
• Malware Analysis
• Threat Hunting
• Email Security Architecture
• Incident Response
• Data Loss Prevention

Monitoring & Analytics

• Splunk
• Microsoft Sentinel
• Defender for Office 365
• SIEM Correlation

Experience

• 6-10 years of Cybersecurity or Messaging Security experience.
• 4+ years of hands-on Proofpoint administration and engineering.
• Experience in enterprise-scale email security environments.

Preferred Certifications

• Proofpoint Certified Professional (PCP)
• Proofpoint Certified Guardian
• Microsoft Security Operations Analyst
• Certified Information Systems Security Professional (CISSP)
• ITIL Foundation

Nice-to-Have Skills

• Microsoft Defender for Office 365
• Mimecast
• Cisco Secure Email
• Exchange Hybrid
• Azure Automation
• Python/PowerShell Automation
• Security Operations Centre (SOC) experience

EY Managed Services Expectations

• Strong ITSM discipline (Incident, Problem, Change, Request Management)
• Queue ownership and SLA adherence
• 24x7 support participation
• Continuous service improvement mindset
• Excellent stakeholder communication and reporting skills

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Requirements: