Lead - SME (Email Abuse)

Sutherland; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Sutherland is seeking a Subject Matter Expert (SME) for Mail Operations to act as a technical and operational authority in email security, abuse mitigation, and Trust & Safety workflows. You will guide analysts in handling high-risk cases in a true 24x7 environment.

The role emphasizes incident investigations, RCA, and process improvements, with hands-on Splunk usage, DKIM/SPF/DMARC familiarity, and collaboration with cross-functional teams to enhance security and operational performance.

Qualifications

• 4+ years of experience in email operations, Trust & Safety, or related domain.
• Strong understanding of SMTP, SPF, DKIM, DMARC, email headers, DNS, and email infrastructure.
• Hands-on experience with Splunk—dashboards, log analysis, and investigations.
• Knowledge of spam, phishing, spoofing, email abuse, and threat vectors.
• Experience handling complex investigations, escalations, and incident analysis.
• Strong analytical and problem-solving skills with pattern identification.
• Experience conducting RCA, trend analysis, and quality reviews.
• Excellent communication and stakeholder-management skills.
• Ability to work independently and provide real-time operational guidance in a fast-paced environment.
• Experience in a 24x7 operational setup is preferred.

Responsibilities

• Act as the Subject Matter Expert for email operations, spam, phishing, spoofing, abuse, and related workflows.
• Provide real-time guidance to analysts handling complex and high-risk email abuse cases.
• Review complex cases ensuring decisions align with policies and security protocols.
• Monitor trends related to spam, phishing, spoofing, malware, and account abuse.
• Support incident investigations, RCA, and corrective/preventive actions for operations and quality issues.
• Conduct regular knowledge-sharing, coaching, calibration, and refresher sessions for analysts.
• Support team leaders with quality, productivity, SLA, and operational performance insights.
• Leverage Splunk and other tools to monitor trends, investigate incidents, track KPIs, and generate insights.
• Identify process gaps and recommend improvements, automation opportunities, and workflow optimizations.
• Assist in developing SOPs, process documentation, knowledge articles, and troubleshooting guides.
• Participate in calibration sessions and quality reviews to drive consistency.
• Collaborate with Trust & Safety, Security, Engineering, Product, Quality, and Operations to resolve issues.
• Support new-hire training, nesting, upskilling, and capability-building for the team.
• Stay updated on evolving email threats and industry best practices, translating insights into improvements.
• Support 24x7 operations, including shift-based activities, escalations, and critical incident management.

Skills

Email operations

SOC security

Splunk

24x7 operations

Root cause analysis

Tools

Splunk

SIEM

Job description

At Sutherland we are a group of energetic and driven individuals. If you are looking to build a fulfilling career and are confident you have the skills and experience to help us succeed, we want to work with you!

Job Description

Role Summary:

The Subject Matter Expert (SME) – Mail Operations will serve as a technical and operational expert supporting email operations, spam/abuse mitigation, and Trust & Safety workflows. The role will be responsible for handling complex and escalated cases, providing subject matter guidance to analysts, monitoring emerging email abuse trends, and supporting operational excellence in a 24x7 environment.

Key Responsibilities:

• Act as the Subject Matter Expert for email operations, spam, phishing, spoofing, abuse, and related Trust & Safety workflows.
• Provide real-time guidance and support to analysts in handling complex, high-risk, and escalated email abuse cases.
• Review complex cases and ensure decisions are aligned with defined policies, procedures, and security protocols.
• Monitor trends related to spam, phishing, spoofing, malware, account abuse, and other forms of email-based threats, and identify emerging patterns.
• Support incident investigations, root cause analysis (RCA), and corrective/preventive actions for operational and quality issues.
• Conduct regular knowledge-sharing, coaching, calibration, and refresher sessions for analysts to improve process understanding and decision accuracy.
• Support Team Leaders and Operations Managers with quality, productivity, SLA, and operational performance insights.
• Leverage Splunk and other relevant tools to monitor operational trends, investigate incidents, track KPIs, and generate actionable insights.
• Demonstrate a strong understanding of SPF, DKIM, DMARC, SMTP, email headers, and email infrastructure to support investigations and troubleshooting.
• Identify process gaps and recommend process improvements, automation opportunities, and workflow optimizations.
• Support the development and maintenance of SOPs, process documentation, knowledge articles, and troubleshooting guides.
• Participate in calibration sessions and quality reviews to drive consistency and accuracy across the team.
• Partner with cross-functional teams, including Trust & Safety, Security, Engineering, Product, Quality, and Operations, to resolve complex issues and improve workflows.
• Support new-hire training, nesting, upskilling, and ongoing capability-building for the operations team.
• Stay current on evolving email threats, abuse patterns, authentication standards, and industry best practices, and translate relevant insights into operational improvements.
• Support 24x7 operations, including shift-based activities, escalations, and critical incident management as required.

Qualifications

• 4+ years of experience in email operations, Trust & Safety, email security, SOC, cybersecurity operations, or a related domain.
• Strong understanding of SMTP, SPF, DKIM, DMARC, email headers, DNS, and email infrastructure.
• Hands-on experience with Splunk, including dashboard usage, log analysis, monitoring, and investigation.
• Strong knowledge of spam, phishing, spoofing, malicious emails, email abuse, and threat vectors.
• Demonstrated experience handling complex investigations, escalations, and incident analysis.
• Strong analytical and problem-solving skills with the ability to identify patterns and determine appropriate actions.
• Experience conducting RCA, trend analysis, quality reviews, and process improvement initiatives.
• Strong communication and stakeholder-management skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• Ability to work independently, make sound decisions, and provide real-time operational guidance in a fast-paced environment.
• Experience working in a 24x7 operational setup is preferred.

Preferred Skills:

• Experience in email security, cybersecurity, Trust & Safety, or abuse prevention.
• Knowledge of SIEM tools, threat intelligence, log analysis, and security monitoring.
• Familiarity with automation, scripting, or data-analysis tools.
• Experience working with large-scale email platforms or cloud-based email environments.
• Relevant certifications in cybersecurity, email security, or cloud technologies would be an advantage.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply