ProofPoint & Abnormal AI tool Administrator

Sonata Software; Bengaluru; On-site; INR 1,100,000 - 1,600,000; Full time

Job summary

Sonata Software in Bengaluru is seeking a ProofPoint & Abnormal AI Tool Administrator with 2-4 years of experience in email security administration. You will serve as the technical expert for Proofpoint and Abnormal AI, define and implement the email security strategy, and manage administration, configuration, and lifecycle of these platforms to strengthen threat detection.

The role requires hands-on experience with Microsoft 365 Exchange Online, mail flow, SPF/DKIM/DMARC, and cross-functional

Qualifications

• Serve as the technical expert for Proofpoint and Abnormal AI platforms.
• Define and implement email security strategy aligned with organizational security objectives.
• Work on administration, configuration, optimization, and lifecycle management of Proofpoint and Abnormal AI platforms.
• Drive continuous tuning of security policies to improve threat detection while minimizing false positives and operational impact.
• Lead investigations and response activities for phishing, BEC, malware, account takeover, spoofing, and other email-based attacks.
• Oversee implementation and optimization of Proofpoint capabilities such as TAP, URL Defense, Attachment Defense, Email Fraud Defense, and Threat Response.
• Optimize Abnormal AI detections for advanced phishing, executive impersonation, vendor fraud, insider threats, and account compromise.
• Perform proactive threat hunting and analyze emerging email attack trends to enhance organizational resilience.
• Expert in complex troubleshooting efforts involving Microsoft 365, Exchange Online, mail routing, SMTP, SPF, DKIM, DMARC, and secure email gateways.
• Collaborate with SOC, Incident Response, Identity & Access Management, Messaging, Infrastructure, and Risk teams to strengthen the organization's overall security posture.
• Establish governance, operational standards, SOPs, and runbooks for email security operations.
• Develop dashboards, KPIs, executive reports, and operational metrics to measure platform effectiveness and demonstrate security value.
• Lead platform upgrades, integrations, migrations, and proof-of-concept evaluations for new email security technologies.
• Mentor and coach junior engineers, provide technical guidance, conduct knowledge-sharing sessions, and support skill development.
• Engage with vendors to resolve complex issues, review product roadmaps, and recommend feature adoption.
• Support audit, compliance, and risk assessment activities related to email security controls.
• Drive automation initiatives using PowerShell, APIs, or scripting to improve operational efficiency.
• Participate in capacity planning, architecture reviews, and strategic security initiatives.

Responsibilities

• Lead investigations and response for phishing, BEC, malware, and account takeovers.
• Oversee Proofpoint capabilities like TAP, URL Defense, Attachment Defense, Email Fraud Defense, and Threat Response.
• Optimize Abnormal AI detections for phishing, impersonation, vendor fraud, and insider threats.
• Mentor and coach junior engineers, provide technical guidance, conduct knowledge-sharing sessions.
• Drive automation using PowerShell, APIs, or scripting to improve operational efficiency.

Skills

Proofpoint

Abnormal AI

Microsoft 365

Email security

Phishing investigations

Incident response

Threat hunting

SIEM integration

SOAR integration

PowerShell

Python

REST APIs

DNS/TLS/Security

Email authentication

Zero Trust

Leadership

Mentoring

Stakeholder mgmt

Education

Bachelor of Engineering (B.E.)

Tools

Proofpoint Email Protection

Abnormal AI

Microsoft 365 Exchange Online

Email gateways

SIEM

SOAR

EDR

PowerShell

Python

REST APIs

DNS

TLS

SMTP

Job description

• 2 - 4 years of experience in Email Security administration.
• Expert-level hands-on experience with Proofpoint Email Protection and Abnormal AI.
• Strong expertise in Microsoft 365 Exchange Online, Exchange administration, and mail flow management.
• Deep understanding of SMTP, SPF, DKIM, DMARC, DNS, TLS, and secure email architecture.
• Proven experience leading complex phishing investigations, incident response, and threat hunting.
• Experience integrating email security solutions with SIEM, SOAR, EDR, and ticketing platforms.
• Strong knowledge of email authentication, anti-spoofing technologies, and zero-trust security principles.
• Hands-on experience with automation using PowerShell, Python, or REST APIs.
• Excellent stakeholder management, communication, and leadership skills.
• Experience mentoring technical teams and leading cross-functional initiatives.

Education Qualification

B.E

Job Title

ProofPoint & Abnormal AI tool Administrator

• Serve as the technical expert for enterprise email security platforms, including Proofpoint and Abnormal AI.
• Define and implement email security strategy, roadmap, and best practices aligned with organizational security objectives.
• Work on administration, configuration, optimization, and lifecycle management of Proofpoint and Abnormal AI platforms.
• Drive continuous tuning of security policies to improve threat detection while minimizing false positives and operational impact.
• Lead investigations and response activities for phishing, Business Email Compromise (BEC), malware, account takeover, spoofing, and other email-based attacks.
• Oversee implementation and optimization of Proofpoint capabilities such as TAP, URL Defense, Attachment Defense, Email Fraud Defense, and Threat Response.
• Optimize Abnormal AI detections for advanced phishing, executive impersonation, vendor fraud, insider threats, and account compromise.
• Perform proactive threat hunting and analyze emerging email attack trends to enhance organizational resilience.
• Expert in complex troubleshooting efforts involving Microsoft 365, Exchange Online, mail routing, SMTP, SPF, DKIM, DMARC, and secure email gateways.
• Collaborate with SOC, Incident Response, Identity & Access Management, Messaging, Infrastructure, and Risk teams to strengthen the organization's overall security posture.
• Establish governance, operational standards, SOPs, and runbooks for email security operations.
• Develop dashboards, KPIs, executive reports, and operational metrics to measure platform effectiveness and demonstrate security value.
• Lead platform upgrades, integrations, migrations, and proof-of-concept evaluations for new email security technologies.
• Mentor and coach junior engineers, provide technical guidance, conduct knowledge-sharing sessions, and support skill development.
• Engage with vendors to resolve complex issues, review product roadmaps, and recommend feature adoption.
• Support audit, compliance, and risk assessment activities related to email security controls.
• Drive automation initiatives using PowerShell, APIs, or scripting to improve operational efficiency.
• Participate in capacity planning, architecture reviews, and strategic security initiatives.