Remote Email Threat Detection Engineer

Atmail; Philippines; On-site; PHP 3,956,000 - 5,782,000; Full time

Benefits offered by this job

Fully remote

Flexible hours

Autonomy

Global team

Job summary

Atmail is seeking an experienced Email Security Engineer to protect large-scale email platforms from spam, phishing, malware, and business email compromise (BEC). This is a hands-on role focused on developing detection logic, tuning email filtering rules, and analysing mail flows in a fully remote team.

You will investigate threats, build detection logic, reduce false positives, and continuously improve the security of our email platform across global customers.

Qualifications

• 5+ years hands-on experience in email security, anti-abuse, email filtering or large-scale email operations.
• Experience investigating phishing, spam, malware, and BEC attacks.
• Experience analysing mail logs and identifying abuse patterns.

Responsibilities

• Investigate spam, phishing, malware and BEC campaigns.
• Develop, test and optimise regex-based detection rules.
• Analyse mail logs, authentication results and abuse signals to identify threats.
• Reduce false positives/negatives through tuning of filtering rules.
• Monitor email traffic to identify compromised accounts and new attack techniques.
• Collaborate with engineering and Level 3 Support to improve platform security.
• Recommend improvements to detection logic, tooling and processes.
• Contribute to technical decisions strengthening Atmail's email security.

Skills

Email security

Threat detection

Regex (PCRE/RE2)

Log analysis

Autonomy

Communication

Tools

SpamAssassin

Rspamd

Proofpoint

Vade

Abusix

SORBS

Return Path

Job description

Atmail is seeking an experienced Email Security Engineer to protect large-scale email platforms from spam, phishing, malware, and business email compromise (BEC). This is a hands-on role focused on developing detection logic, tuning email filtering rules, and analysing mail flows in a fully remote team.

You will investigate threats, build detection logic, reduce false positives, and continuously improve the security of our email platform across global customers.