Email Security Engineer – Job Description
Job Title
Email Security Engineer
Job Summary
The Email Security Engineer is responsible for the administration, security, availability, monitoring, and operational management of enterprise email security platforms. This role ensures the protection of corporate email systems against phishing, malware, spam, business email compromise (BEC), spoofing, and other email-based threats while maintaining platform stability and service availability.
The engineer will work closely with Account Security Team, NTT Operations Teams, OEM vendors, and infrastructure teams to resolve technical issues, implement security controls, enforce security policies, and provide operational and security reporting. The role also supports continuous improvement of email security capabilities, threat protection, and service reliability.
Key Responsibilities
Email Security Platform Management
- Administer and maintain enterprise email security platforms and services.
- Ensure high availability, performance, and operational health of email security infrastructure.
- Monitor email security gateways, cloud email security solutions, and supporting systems.
- Manage platform configurations, upgrades, patches, and lifecycle activities.
- Support capacity planning, performance tuning, and operational optimization.
Platform Availability & Operational Management
- Monitor platform availability and service health to ensure compliance with agreed SLAs.
- Investigate service outages, mail flow issues, delivery delays, and system performance concerns.
- Coordinate incident resolution activities across multiple operational teams.
- Support disaster recovery and business continuity processes related to email security platforms.
- Maintain operational runbooks and standard operating procedures.
Email Threat Protection & Security Operations
- Monitor and respond to:
- Phishing attacks
- Malware campaigns
- Spoofing attempts
- Email-borne threats
- Investigate email security incidents and coordinate remediation activities.
- Support implementation of:
- SPF
- DKIM
- DMARC
- Anti-phishing controls
- Analyze email security trends and recommend improvements.
- Coordinate with OEM vendors to resolve product defects, technical issues, software bugs, and platform-related security concerns.
- Manage vendor escalations for critical incidents and service disruptions.
- Review vendor advisories, product updates, and security bulletins.
- Participate in vendor troubleshooting sessions and technical reviews.
- Track vendor action plans and remediation timelines.
Security Policy Enforcement
- Enforce security policies, standards, and controls as requested by the Account Security Team.
- Implement email security controls in alignment with organizational security requirements.
- Ensure compliance with approved security baselines and governance requirements.
- Support security exception reviews and risk mitigation activities.
- Validate policy compliance across email security environments.
Reporting & Metrics
- Generate security and operational reports mutually agreed with the Account Team.
- Develop dashboards and metrics related to:
- Email threat activity
- SLA performance
- Mail flow performance
- Present operational and security posture reports to stakeholders.
- Identify opportunities to improve email security controls and operational efficiency.
- Support automation initiatives for email threat investigation and response.
- Improve phishing detection and response capabilities.
- Recommend enhancements to platform resilience and monitoring.
- Contribute to Email Security Program maturity initiatives.
Required Qualifications
Education
- Bachelor's degree in Cyber Security, Information Technology, Computer Science, or related discipline.
- Equivalent professional experience may be considered.
Experience
Mid-Level Engineer
- 3-5 years of experience supporting enterprise email security platforms.
- 5-8 years of experience in Email Security Engineering, Messaging Security, or Security Operations.
Technical Skills
Email Security Platforms
Experience with one or more:
- Microsoft Exchange Online Protection (EOP)
- Proofpoint
- Mimecast
- Barracuda Email Security Gateway
- Google Workspace Security
Strong knowledge of:
- SPF
- DKIM
- DMARC
- SMTP
- Email routing and mail flow
Security Operations
- Phishing investigation
- Malware analysis
- Security monitoring
- Email threat hunting
- Microsoft 365
- Exchange Online
- Google Workspace
Monitoring & Reporting
- SIEM platforms (Splunk, Sentinel, QRadar)
- Operational reporting
- SLA monitoring
Preferred Certifications
Security Certifications
- CompTIA Security+
- CompTIA CySA+
- CISSP
- GSEC
- GCIH
Microsoft Certifications
- Microsoft SC-200
- Microsoft SC-300
- Microsoft MS-102
- Microsoft Security Operations Analyst
- Proofpoint Certified Professional
- Microsoft 365 Security Certifications
Desired Competencies
- Strong troubleshooting and problem-solving skills
- Experience coordinating across multiple support teams
- Vendor management and escalation experience
- Strong communication and stakeholder management skills
- Ability to work in high-availability enterprise environments
- Strong reporting and documentation