Email Security Technical Lead

Xelerate; Porto; Híbrido; EUR 90 000 - 120 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote-friendly environment

Competitive salary

International career opportunities

Resumo da oferta

Xelerate is seeking an Email Security Technical Lead to own the technical direction of our enterprise email security capability across a global footprint. You will define strategy, lead architecture, and drive security controls for Microsoft 365, Exchange Online, Proofpoint, and Defender for Office 365.

As a senior engineer, you will mentor teams, coordinate with SOC, and shape automation through APIs, PowerShell, and Python to protect users and domains from phishing, BEC, spoofing, and malware

Qualificações

• 6+ years in email security, messaging security, or cybersecurity engineering.
• Strong, hands-on Proofpoint experience is mandatory.
• Advanced experience with Microsoft 365/Exchange Online and Defender for Office 365.
• Proven automation skills with PowerShell, Python, APIs, SIEM/SOAR.
• Deep knowledge of phishing, BEC, spoofing, and other email threats.

Responsabilidades

• Own the technical strategy, roadmap, and engineering direction for enterprise email security.
• Lead design, deployment, and improvement of controls for phishing, malware, and BEC.
• Define and govern SPF, DKIM, DMARC across company domains.
• Provide technical leadership during high‑impact email security incidents with SOC.
• Drive automation and self-service to protect a 24/7 global business.
• Develop dashboards and metrics to monitor email security posture and trends.

Conhecimentos

Email security

Threat analysis

Automation

Security leadership

Stakeholder management

Technical communication

English fluency

Ferramentas

Proofpoint

Microsoft 365

Exchange Online

PowerShell

Python

APIs

SIEM

SOAR

Descrição da oferta de emprego

You have the opportunity to join our team and tackle business challenges in a dynamic, purpose-driven environment characterized by close collaboration with business stakeholders.

As an Email Security Technical Lead, you will own the technical direction of the enterprise email security capability for a global market leader in chemical and ingredients distribution, operating across dozens of countries and serving hundreds of thousands of customers worldwide. You will be the go-to technical authority for protecting users, domains, and messaging infrastructure against phishing, business email compromise, impersonation, and malware.

You will join a specialized security engineering team within the global Information Security organization, focused on cloud security, reducing the attack surface, and proactive security engineering. Working closely with Security Operations, Workplace Services, Identity & Access Management, and Infrastructure teams, you will shape how email security is designed, automated, and continuously improved across Microsoft 365 and Proofpoint, the primary email security platform.

Your Role and Responsibilities:

• Email Security Platform Ownership: Own the technical strategy, roadmap, architecture, standards, and engineering direction for the enterprise email security capability, acting as the primary subject matter expert and technical owner of the email security service. Define, implement, and maintain controls across Microsoft 365, Exchange Online, Proofpoint, and Microsoft Defender for Office 365.
• Threat Protection Controls: Lead the design, deployment, and continuous improvement of controls protecting against phishing, malware, business email compromise (BEC), impersonation, spoofing, malicious links, and malicious attachments.
• Domain Protection & Email Authentication: Define and govern email authentication standards (SPF, DKIM, and DMARC) and drive their adoption across all company-owned domains. Lead initiatives protecting domains, brands, and executives against spoofing, look‑alike domains, and email fraud campaigns, working with internal and external stakeholders to remediate risks.
• Incident Response & Threat Analysis: Provide technical leadership during high‑impact email security incidents in collaboration with the Security Operations Center (SOC). Lead investigations into phishing, business email compromise, account compromise, and other malicious email activity, and use threat intelligence, attacker techniques, and security telemetry to strengthen preventive and detective controls.
• Automation & Self‑Service: Drive automation and integration initiatives using APIs, scripting, and orchestration to improve threat detection, response, policy management, and operational workflows. Build robust, automated and self‑service processes for roll‑outs and routine operations, so a global business that operates around the clock stays protected without depending on manual, out‑of‑hours intervention.
• Monitoring & Continuous Improvement: Develop and maintain dashboards, metrics, and reporting on email security posture, control effectiveness, and threat trends. Continuously tune controls to reduce false positives and false negatives, adapt to emerging threats, and document work transparently in the team’s ticketing and knowledge tools.

Your Skills and Experiences:

• 6+ years of experience in email security, messaging security, or cybersecurity engineering, including experience in senior engineering, architecture, or technical lead roles.
• Strong, hands‑on Proofpoint experience is mandatory, as Proofpoint is the primary email security platform.
• Advanced experience designing, implementing, and operating enterprise email security within Microsoft 365 and Exchange Online; experience with Microsoft Defender for Office 365 and comparable enterprise messaging environments.
• Proven experience with automation, integrations, and security operations tooling using PowerShell, Python, APIs, SIEM, SOAR, or similar technologies.
• Strong understanding of email threats and attack techniques, including phishing, BEC, spoofing, impersonation, account compromise, malicious attachments, and URL‑based attacks.
• Strong knowledge of email security architecture, mail routing, authentication technologies, and domain protection controls, including SMTP, DNS, SPF, DKIM, and DMARC.
• Experience investigating complex email security incidents and implementing preventive, detective, and response controls in enterprise environments.
• Broad knowledge across the wider security landscape combined with deep email expertise, and openness to working with new technologies.
• Experience supporting security operations for a 24/7 global business is an advantage.
• Knowledge of security frameworks and best practices such as ISO 27001, NIST, CIS Controls, and MITRE ATT&CK.
• Relevant Microsoft, Proofpoint, GIAC, CISSP, or equivalent certifications are a plus.
• Experience in the chemical industry is a plus.
• Strong sense of ownership, accountability, and urgency, particularly during security incidents, with the autonomy to set priorities and drive your own work.
• Strong analytical, communication, stakeholder management, and technical leadership skills, with the ability to translate complex technical risks into actionable improvements and to collaborate with internal IT teams and external service providers in a global, multicultural environment.
• Fluency in English (spoken and written) is essential; German is a plus.

What you can expect from us:

• Remote-flexible environment;
• Highly attractive salary and benefits;
• Great work-life balance and flexibility;
• Find meaning and purpose in your day-to-day work; your expertise has a visible impact on the digitalization of a global industry leader;
• You will be part of a company where commitment, quality, and continuous improvement are core principles of our culture;
• Highly engaged tech community;
• International career opportunities;
• Focus on individual development.

About us:

xelerate.tech is passionate about software, tech, and people. We aim to attract the most talented engineers to deliver high‑quality software products through highly performant teams.